Sendspin/sendspin-go holds a health index of 67 out of 100, placing it in the Good band. It scores highest on Engineering Quality (82/100) and lowest on Security (32/100). It was last updated 8 days ago. A single contributor accounts for most of its recent work.
67
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
67
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 61 is calibrated to 67 on the published index scale (record calibration 2026-08-02).
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 9 ⇿
0Stars
9Forks
12Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 8Patch 4
OpenSSF Scorecard 3.2 / 10
3.2aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-29 23:41 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1205,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 576534,
"Shell": 11709,
"Makefile": 9827
},
"pushed_at": "2026-07-21T12:49:14Z",
"created_at": "2025-10-23T20:13:29Z",
"owner_type": "Organization",
"updated_at": "2026-07-22T08:57:00Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://www.sendspin-audio.com",
"name": "Sendspin",
"type": "Organization",
"login": "Sendspin",
"company": null,
"location": null,
"followers": 141,
"avatar_url": "https://avatars.githubusercontent.com/u/214994244?v=4",
"created_at": "2025-06-05T11:32:35Z",
"is_verified": null,
"public_repos": 21,
"account_age_days": 419
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.8.2",
"kind": "patch",
"published_at": "2026-07-18T19:58:27Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2026-06-12T16:09:52Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-06-11T23:32:58Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2026-05-05T22:50:32Z"
},
{
"tag": "v1.6.3",
"kind": "patch",
"published_at": "2026-05-04T11:30:22Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2026-05-01T22:10:01Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2026-05-01T20:47:35Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-04-21T13:51:20Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-04-20T14:20:00Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-04-17T01:53:17Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-04-15T19:11:04Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-04-14T22:36:41Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-04-12T18:19:27Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2025-10-27T04:17:56Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2025-10-26T03:38:35Z"
},
{
"tag": "v0.0.5",
"kind": "patch",
"published_at": "2025-10-25T22:10:25Z"
},
{
"tag": "v0.0.4",
"kind": "patch",
"published_at": "2025-10-25T21:13:50Z"
},
{
"tag": "v0.0.2",
"kind": "patch",
"published_at": "2025-10-25T20:52:38Z"
},
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2025-10-25T20:42:49Z"
}
],
"recent_commits": [
{
"oid": "c61a40513249b22de9a5077b0acd1b4682a0b697",
"body": "The new transport replaces the plaintext handshake outright; the\nspec-v2 server release requires encryption. Legacy deployments stay on\nv1.8.x/v0.1.x until both sides upgrade. Removes the dual-stack\ndetection from Phase S1 and the migration window from S7.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ABBNDxfoPxHwQNoExpzFJA",
"is_bot": false,
"headline": "docs(plans): spec-v2 ships as a hard cutover, no dual-support window",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-18T21:27:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6c446db25e2dc26a7b4d674dbc03b5e55f3480d4",
"body": "Conformance harness not yet updated: spec-v2 work develops on an\nunreleased feat/spec-v2 branch. aiosendspin 7+ (encryption, no source\nrole) and the unreleased sendspindotnet SDK serve as interim interop\ngates; source@v1 stays last with activation declined.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ABBNDxfoPxHwQNoExpzFJA",
"is_bot": false,
"headline": "docs(plans): record spec-v2 release gating and interop-peer constraints",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-18T21:20:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "595ce8d62171313418f96a730fdd432d313382ed",
"body": "…spec\n\nGap analysis of pkg/sendspin + pkg/protocol against Sendspin/spec@7c04eb7\n(Noise transport, pairing, server/activate, available boolean, new player\ntiming/send-ahead model, source/visualizer/color roles) and a 7-phase\nimplementation plan with a dual-stack migration path.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ABBNDxfoPxHwQNoExpzFJA",
"is_bot": false,
"headline": "docs(plans): propose server compliance plan for the updated Sendspin …",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-18T21:17:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9474de56d2e69f352210cc42cb3a9f01e4c36999",
"body": "sendspin-go-server and sendspin-go-cli (lowercase, -go prefix order as\ncreated) replace the planned sendspin-server-go / sendspin-player-go\nthroughout both split-plan docs.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ABBNDxfoPxHwQNoExpzFJA",
"is_bot": false,
"headline": "docs(plans): record Phase 3b/3c completion and final repo names",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-18T20:14:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "830294f67f2a19607a7cdab0e11a3a3f71bd2749",
"body": "…on-8kt0m3\n\nPhase 3a repo-split prep + server-initiated volume/mute control (rebase of #144)",
"is_bot": false,
"headline": "Merge pull request #145 from Sendspin/claude/go-library-familiarizati…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-07-18T19:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d42524835738479c4a91c024003901a29bedea20",
"body": "SetVolume dropped volume changes from state while muted but still\napplied them to the output. The output multiplier is (volume/100)^1.5\nindependent of mute, so a volume-0 command arriving alongside mute (as\nMusic Assistant sends) left the output gain at 0 after unmute while the\nserver still displaye\n[…]\nthe mute -> volume 0 -> unmute sequence against\na recording fake output.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ABBNDxfoPxHwQNoExpzFJA",
"is_bot": false,
"headline": "fix(sendspin): keep output gain in sync with stored volume across mute",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-18T19:45:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "449c52c24ed60b27efc66a96dbd6ac4cf961f39d",
"body": "Receiver now dispatches player/command volume and mute messages via a\nnew OnCommand hook, wired through Player to SetVolume/Mute. Muting no\nlonger clobbers the remembered volume: SetVolume skips the write while\nmuted, so unmuting restores the prior level untouched.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(sendspin): handle server-initiated volume/mute commands",
"author_name": "Meneldor",
"author_login": "Meneldor",
"committed_at": "2026-07-18T19:45:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3cf9c0630fb1700de9132995a81d3a9d1416186f",
"body": "…a mutex\n\nPlayer.state, .receiver, and .output are read/written from multiple\ngoroutines (caller, reconnect loop, audio consumption callbacks), and an\nupcoming server-initiated command handler adds another. Add stateMu to\nserialize access. Client.pingLoop and sendJSON took an RLock while\nwriting to the shared connection, which races with concurrent writers\nunder -race. Prep work for clean server-initiated volume/mute handling.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(sendspin,protocol): guard Player state and Client conn with …",
"author_name": "Meneldor",
"author_login": "Meneldor",
"committed_at": "2026-07-18T19:45:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ad6a07122ea08e80d0dd67e33de642ab6af99e01",
"body": "….3.x\n\nThe last-monorepo tag becomes v1.8.x and the first library-only SDK\nrelease v1.9.0.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ABBNDxfoPxHwQNoExpzFJA",
"is_bot": false,
"headline": "docs(plans): correct release numbering — latest tag is v1.8.1, not v1…",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-18T19:33:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "54cff9236fee2ef8cf0a2b646902caf0c8ae45d5",
"body": "…-server-go\n\nSuffix matches the SDK's naming convention. Binary, systemd-unit, and\ntarball names stay sendspin-player / sendspin-server; noted the\ngo-install binary-naming caveat under D4.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ABBNDxfoPxHwQNoExpzFJA",
"is_bot": false,
"headline": "docs(plans): rename target CLI repos to sendspin-player-go / sendspin…",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-18T19:27:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ddd14f6befdfdf1edcc17de93971328d925cf771",
"body": "Phase 3a of the repo-split execution plan:\n- ci.yml test job now fails if pkg/ imports any internal/ package,\n making the Phase 2 decomposition gate permanent.\n- Plan doc gains the doc/asset disposition inventory: where each\n README section, script, workflow, and dist/ asset lands across the\n thr\n[…]\n the last monorepo v1.3.x tag) is a release\naction left to a maintainer.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ABBNDxfoPxHwQNoExpzFJA",
"is_bot": false,
"headline": "ci: add SDK boundary guard; docs(plans): record Phase 3a sweep results",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-18T19:25:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9f0be8ad67d3a261a5cb5fdb2aae2a6851c8617a",
"body": "Details the extraction of sendspin-player and sendspin-server repos now\nthat Phases 0-2 of the 2026-06-11 plan are complete and the SDK boundary\nis clean (pkg/ imports zero internal/ packages).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ABBNDxfoPxHwQNoExpzFJA",
"is_bot": false,
"headline": "docs(plans): add Phase 3 execution plan for the three-repo split",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-18T19:19:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0c2390c1dd027f516e5dbcf81b1e4be02418c540",
"body": "…ncoders\n\nrefactor(encode): Phase 2 — promote encoders to pkg/audio/encode (gate met)",
"is_bot": false,
"headline": "Merge pull request #142 from Sendspin/refactor/split-phase2-promote-e…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T14:59:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b98b2f234dedc503fe355628b52b7f50114ec91",
"body": "…r promotion",
"is_bot": false,
"headline": "docs: Phase 2 gate met — pkg/ has zero internal/ imports after encode…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T03:12:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b2fe16fb0f899df0000bd49ad9c71c4965a77e1",
"body": "The Opus and FLAC encoders were the ONLY thing pkg/sendspin used from\ninternal/server (the source decoders and TUI are used solely by the server\nCLI). Promoting them to a public package therefore drops pkg/sendspin's\ninternal/server dependency entirely.\n\n- Move opus_encoder.go / flac_encoder.go (+ t\n[…]\ng/ now imports ZERO internal/\npackages. internal/server (sources + TUI) is used only by cmd/sendspin-server\nnow, so it can stay private to the future server-CLI repo.\n\nPhase 2 of the three-repo split.",
"is_bot": false,
"headline": "refactor(encode): promote Opus/FLAC encoders to public pkg/audio/encode",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T03:11:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "230a8d7643e3d453b98e2eaa3f8c8d3ddb8afdf4",
"body": "…iscovery\n\nrefactor(discovery): Phase 2 — promote internal/discovery to pkg/discovery",
"is_bot": false,
"headline": "Merge pull request #141 from Sendspin/refactor/split-phase2-promote-d…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a468da8e5231cb587eea502cf4e7c8fe9eb6de65",
"body": "…CLAUDE.md\n\nAddress public-API hygiene from the PR review now that discovery is a public\npackage: add a godoc package comment to pkg/discovery, and remove the\ninternal/discovery bullet from CLAUDE.md's internal layout (the package was\npromoted to pkg/discovery in this PR).",
"is_bot": false,
"headline": "docs(discovery): add package doc; drop stale internal/discovery from …",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:50:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "310f369977ff7151ee53e16f4c9ad2ceafd7ca40",
"body": null,
"is_bot": false,
"headline": "docs: mark Phase 2 discovery promotion done in split plan",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:39:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ccd30d4d29b5c3bf0d76e43225f0292e6b311684",
"body": "internal/discovery (mDNS browse/advertise: Manager, Config, ServerInfo,\nClientInfo, NewManager) is the maintained discovery implementation, used by\nboth the server (advertise + browse-for-clients) and the player CLI\n(browse-for-servers). For the repo split the CLI repos must reach it across\na module\n[…]\nhaned stale fork) and repoint the four importers (main.go, server.go,\nclient_dialer.go + test). No behavior change; pkg/sendspin no longer imports\ninternal/discovery.\n\nPhase 2 of the three-repo split.",
"is_bot": false,
"headline": "refactor(discovery): promote internal/discovery to public pkg/discovery",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:37:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d2b25cbaed0938e808124314f0cbc59ab32f705",
"body": "…-sendspin\n\nrefactor(sendspin): Phase 1 — decompose pkg/sendspin by file",
"is_bot": false,
"headline": "Merge pull request #140 from Sendspin/refactor/split-phase1-decompose…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:26:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94a33a2eca23a59524ae4f4498850224ede8b63b",
"body": null,
"is_bot": false,
"headline": "docs: mark Phase 1 complete in the three-repo split plan",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:21:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e395deb6e38d3f3aa3cacd52fea2c7971c47c17",
"body": "containsRole was defined in player.go but used only by receiver.go's\nstream-clear/stream-end handlers. Both are client files; co-locating the\nhelper with its sole user keeps the client decomposition clean. No\nbehavior change.\n\nPhase 1 of the three-repo split.",
"is_bot": false,
"headline": "refactor(sendspin): move containsRole to receiver.go (its only user)",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:20:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1dc0c3c2ae8ab13df30b0ddc55d4279cd287cd9",
"body": "Separate the shared AudioSource contract (source.go) from the built-in\ntest-tone implementation (source_testtone.go), and delete the FileSource /\nNewFileSource placeholder, which only ever returned a 'not implemented'\nerror. Update the package-doc server example to use NewTestTone instead of\nthe removed stub.\n\nPhase 1 of the three-repo split.",
"is_bot": false,
"headline": "refactor(sendspin): split source.go; drop dead NewFileSource stub",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:19:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9bfe3d433206821ad69e4ce4b8c83a32d31325f",
"body": "Same package, no API change. config.go held both player and server config\nplus shared overlay machinery; separate them so the eventual client/server\npackage split is mechanical:\n\n- config_common.go: loadYAMLConfig, userConfigPath, ApplyEnvAndFile,\n Write{String,Int}Key, writeScalarKey, atomicWriteF\n[…]\nltPlayerConfigPath, AsStringMap, PersistStaticDelay.\n- config_server.go: ServerConfigFile + ServerEnvPrefix, LoadServerConfig,\n DefaultServerConfigPath, AsStringMap.\n\nPhase 1 of the three-repo split.",
"is_bot": false,
"headline": "refactor(sendspin): split config.go into common/player/server files",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:16:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3f9f27e959da900bf16a449916a9f112a3044383",
"body": "Move ProtocolVersion, AudioChunkMessageType, Default{SampleRate,Channels,\nBitDepth}, ChunkDurationMs and BufferAheadMs from server.go into a neutral\nconstants.go. Same package, so no public API change — but it decouples the\nclient scheduler (which reads ChunkDurationMs) from the server's source\nfile, ahead of the eventual client/server package split.\n\nPhase 1 of the three-repo split.",
"is_bot": false,
"headline": "refactor(sendspin): hoist shared wire/audio constants out of server.go",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:13:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "356a13f36d8e48d785293c73017f31d033ef31b3",
"body": "chore: repo-split plan + Phase 0 dead-code removal",
"is_bot": false,
"headline": "Merge pull request #139 from Sendspin/chore/repo-split-prep",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T02:10:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e41136b11626df5c66f4caef7550aaf1752238a",
"body": "pkg/protocol/doc.go still said \"Resonate\" and showed a fictional API\n(protocol.NewClient(\"localhost:8927\") + client.SendHello). Replace with\naccurate Sendspin text and a real NewClient(Config)+Connect() example.\n\nUpdate the three-repo-split plan: Phase 0 dead-code removal complete.",
"is_bot": false,
"headline": "docs(protocol): fix stale Resonate godoc + mark Phase 0 done",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T01:18:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "340f6ebff1705c13c2b699137ee309634a08bbb4",
"body": "Both public packages were imported by nothing in the module and had\ndiverged from the maintained code:\n\n- pkg/discovery is a stale fork of internal/discovery (the live one).\n Its Browse() even has a Timeout: 3 — three *nanoseconds*, not seconds\n — so it never discovers anything, and it lacks the n\n[…]\nin pkg/audio).\n\nPart of the three-repo split Phase 0 cleanup. Phase 2 will reintroduce a\npkg/audio/encode backed by the real encoders, and promote the maintained\ndiscovery Manager to a public package.",
"is_bot": false,
"headline": "refactor: delete orphaned pkg/discovery and pkg/audio/encode",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T01:16:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "877295d8e046831717622e1a3e49592d78163bca",
"body": "ResampledSource (and the internal/server.Resampler it wrapped) had no\ncallers — auto-resampling was removed long ago, and the live server path\nresamples via pkg/audio.Resampler. Delete ResampledSource from\naudio_source.go and remove resampler.go / resampler_test.go.",
"is_bot": false,
"headline": "refactor(server): remove dead ResampledSource and internal resampler",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T01:14:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bce9d569d04e8290605402b05ef3502d02c08b46",
"body": "internal/server contained a complete second server (Server, AudioEngine,\nClient, Config, the old handleConnection/clientWriter, and a duplicate\nCreateAudioChunk) that no binary or package used — the live server is\npkg/sendspin.Server built on the Group/Role model. Verified no callers\noutside the dea\n[…]\nead engine and are dropped.\n\nFirst cleanup step of the three-repo split (see\ndocs/superpowers/plans/2026-06-11-three-repo-split.md). Build, vet,\nrace tests, and conformance-relevant suites stay green.",
"is_bot": false,
"headline": "refactor(server): remove dead legacy internal/server engine",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T00:51:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e4a3a1266c3fc850597c05be38422536835ab67a",
"body": null,
"is_bot": false,
"headline": "docs: plan for splitting sendspin-go into SDK + player + server repos",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-12T00:50:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2830cc109100d7669e9464fc3d60baf6776d55e",
"body": "style(sendspin): gofmt receiver.go (fix red Lint check)",
"is_bot": false,
"headline": "Merge pull request #138 from Sendspin/fix/gofmt-trailing-ws",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-11T23:24:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8ad241dec73f41fc2c6228e970b2266b0359586",
"body": "The Lint CI check was failing on main with a gofmt violation in\nreceiver.go (golangci-lint reports only the first hunk —\nreceiver.go:30 — but the whole file needed formatting). The drift\naccumulated across earlier merges: trailing whitespace on a few\ncomment/field lines plus struct-field alignment and a missing blank\nline before NewReceiver.\n\nPure gofmt -w output; no behavior change.",
"is_bot": false,
"headline": "style(sendspin): gofmt receiver.go",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-11T23:22:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4b0401d0a10f4075870f04ae64c13ba5563b868",
"body": "fix(sendspin): stop advertising the visualizer role (#136)",
"is_bot": false,
"headline": "Merge pull request #137 from Sendspin/fix/drop-visualizer-advertisement",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-11T23:13:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fae303f00ae61a40b0e859cfce77d20a5cb69b6b",
"body": "Removed commented-out code and improved comments for clarity.",
"is_bot": false,
"headline": "Clean up comments and remove unused code",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-11T23:13:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2b062a0e666b0fd2daaeb31a02322305a5769a3",
"body": "The receiver advertised visualizer@v1 with a visualizer@v1_support object\ncontaining only buffer_capacity, but it implements no visualizer behavior\n(the protocol client has no visualizer stream channel or consumer).\n\nSpec-current aiosendspin (Music Assistant 2.9.0) requires fields the Go\nstruct does\n[…]\nel\nVisualizerV1Support type is retained for callers that actually implement a\nvisualizer.\n\nAdd an end-to-end test asserting the receiver's advertised roles include\nplayer@v1 and exclude visualizer@v1.",
"is_bot": false,
"headline": "fix(sendspin): stop advertising the visualizer role (#136)",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-11T23:07:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c5c224f653dbed3a9a70590167c0c2cea7aa7ab",
"body": "feat: move repeat/shuffle to controller state (spec#81) + client consumption",
"is_bot": false,
"headline": "Merge pull request #135 from Sendspin/feat/controller-repeat-shuffle",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-04T15:26:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2c6498a039f2daa417a1ab7147a6ff343c60294",
"body": "Resolve conflicts by converging on main's existing attach-to-group hook:\nPR #114 added an identical group back-reference mechanism (attachToGroup)\nfor the now-stateful MetadataGroupRole, so drop this branch's duplicate\ngroupAware/setGroup and have ControllerGroupRole implement attachToGroup\ninstead. messages_test.go keeps both new test functions.",
"is_bot": false,
"headline": "Merge branch 'main' into feat/controller-repeat-shuffle",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-04T15:03:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0217a1397d5293d63686329b17239d693f037577",
"body": "Surface the play mode on the receiver so the full repeat/shuffle path is\nexercised end to end (server broadcast -> wire -> client merge).\n\n- Metadata gains Repeat/Shuffle fields.\n- handleServerState now applies controller state: repeat/shuffle are a\n full snapshot with no timestamp, so they apply i\n[…]\nking decode/schedule/channel op.\npumpSchedulerOutput now takes its scheduler as an argument, pinning each\npump goroutine to the instance it was started for. The orphaned\nschedulerCtx field is removed.",
"is_bot": false,
"headline": "feat(sendspin): consume controller repeat/shuffle on the client",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-04T14:51:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "300d7f58a7f7af14f0ff4678ed4489448f5c1d60",
"body": "Relocate the repeat and shuffle play-mode fields from the metadata role\nto the controller role state, matching aiosendspin and Sendspin/spec#81:\n\"metadata describes what is playing; controller describes how it plays.\"\n\n- ControllerState gains required repeat/shuffle fields (canonical source),\n alon\n[…]\n play mode.\n- RegisterRole injects the owning Group into roles implementing the\n unexported groupAware interface, giving broadcasting roles a member\n handle without widening the GroupRole interface.",
"is_bot": false,
"headline": "feat(protocol): move repeat/shuffle to controller state (spec#81)",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-06-04T14:50:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2fc361f251604b3239f7040c465b4ce4e7e42219",
"body": "feat(sendspin): emit stream/request-format for format adaptation",
"is_bot": false,
"headline": "Merge pull request #132 from Sendspin/feat/stream-request-format",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T02:44:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ddddb965b2641386f7ae346976b7ff582c612c7",
"body": "feat(sendspin): persist static_delay_ms across restarts",
"is_bot": false,
"headline": "Merge pull request #133 from Sendspin/feat/persist-static-delay",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T02:42:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c64c45e24ea0bdea1f234f52f4309b54ab64fbf",
"body": "…elay",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into feat/persist-static-d…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T02:39:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ec83f5ed7b2ba361ce68e2ecac3773d45bbb1da",
"body": "…ormat\n\n# Conflicts:\n#\tpkg/sendspin/player.go\n#\tpkg/sendspin/player_test.go",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into feat/stream-request-f…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T02:38:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bc9553aecda887d77a6ef49e8c04f7ce4bfc024",
"body": "feat(sendspin): add external_source client API",
"is_bot": false,
"headline": "Merge pull request #131 from Sendspin/feat/external-source-client-api",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T02:33:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c50e7940d6c7763ab4f336e0e9477d7edc3daa70",
"body": "feat(sendspin): honor client/goodbye.reason for server re-dial",
"is_bot": false,
"headline": "Merge pull request #134 from Sendspin/feat/honor-goodbye-reason",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T02:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53434d50d4751cdc0a149b19b93607f8b233ce94",
"body": "A server-dialed client (discovery mode) was latched on first connect and\nnever re-dialed after disconnect, regardless of why it left. Per spec a\n\"restart\" goodbye means the client intends to return, while \"shutdown\",\n\"another_server\", and \"user_request\" do not.\n\nhandleClientGoodbye now records the r\n[…]\nlag when the reason is \"restart\"; and the\ndialer frees the instance slot with no cooldown on that signal so the next\ndiscovery event re-dials, while other reasons keep the instance latched.\n\nRefs #117",
"is_bot": false,
"headline": "feat(sendspin): honor client/goodbye.reason for server re-dial",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T02:19:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3b34bf399fba8349b5c03a5ee396ac0bc4baffa3",
"body": "Per spec the client should persist static_delay_ms locally so the embedder\nneed not re-supply it on every connect. A static delay set on the CLI is now\nwritten back to the player YAML config (mirroring client_id persistence), so\nit survives restarts.\n\nAdds PersistStaticDelay plus a WriteIntKey write\n[…]\nar, which is correct for client_id but fails to load\nback into the *int static_delay_ms field. WriteIntKey writes a proper !!int\nscalar; WriteStringKey and the client_id path are unchanged.\n\nRefs #122",
"is_bot": false,
"headline": "feat(sendspin): persist static_delay_ms across restarts",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T02:12:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "50f13e25a43dc9d014047e49d95783700ca15f88",
"body": "The stream/request-format message had no struct, parsing, or emit path at\nall. Adds the wire types (StreamRequestFormat / RequestFormatPlayer, all\nplayer fields optional per spec), a protocol Client.SendRequestFormat helper,\nand a Player.RequestFormat(FormatRequest) API so an embedder can ask the\nse\n[…]\nrk or CPU pressure. The server responds with a new stream/start.\n\nThis adds the manual API; an automatic buffer-health-driven adaptation policy\nis intentionally left as a separate decision.\n\nRefs #127",
"is_bot": false,
"headline": "feat(sendspin): emit stream/request-format for format adaptation",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T02:06:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7bca73ad4dfe2c9c027a112739711a73b8a1b0ca",
"body": "Adds Player.EnterExternalSource() / ExitExternalSource() so a Go client can\nannounce that it is driven by an external system and is not participating in\nSendspin playback, per spec. EnterExternalSource sends client/state with\nstate \"external_source\"; ExitExternalSource re-sends the synchronized stat\n[…]\nand ends active streams.\n\nThe client API lands independently of server-side external_source handling\n(tracked separately): a Go client can announce the state to any conformant\nserver today.\n\nRefs #123",
"is_bot": false,
"headline": "feat(sendspin): add external_source client API",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T02:02:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4ca1802d37d18ed8c0521d69b0865a5852495b95",
"body": "fix(audio): apply perceptual volume curve (vol/100)^1.5",
"is_bot": false,
"headline": "Merge pull request #128 from Sendspin/fix/perceptual-volume-curve",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T01:13:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f42f56af0480afc4996021a14aaa71fa56c02507",
"body": "fix(sendspin): validate static_delay_ms against spec range 0–5000",
"is_bot": false,
"headline": "Merge pull request #129 from Sendspin/fix/static-delay-range-validation",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-29T01:13:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba110eec46fcd00538d58b9d6fdd7c1ce0ea36b6",
"body": "NewScheduler applied static_delay_ms verbatim, so an out-of-range value\nfrom a misbehaving server or a bad local config (negative, or far above\nthe spec maximum) would shift playback arbitrarily out of sync. Per spec\nstatic_delay_ms is an integer in range 0–5000; clamp to that range and\nlog when a value is adjusted.\n\nRefs #124",
"is_bot": false,
"headline": "fix(sendspin): validate static_delay_ms against spec range 0–5000",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-28T22:18:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbbd0d59a7fce39507f6ffd5eee64e7bb10ae136",
"body": "Volume gain was applied linearly (vol/100), so at volume 50 this client\noutput ~0.5 amplitude (-6 dB) where a conformant Sendspin player outputs\n~0.354 (-9 dB). In a multi-room group that divergence made a Go client\naudibly louder than its peers at any volume below 100.\n\nMap the multiplier through the spec's perceptual curve so reported volume\ntracks perceived loudness and matches conformant peers. Endpoints are\nunchanged (0 -> 0.0, 100 -> 1.0).\n\nRefs #116",
"is_bot": false,
"headline": "fix(audio): apply perceptual volume curve (vol/100)^1.5",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-28T22:16:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "234cb3830f351ec05ed47b16a5b4364a04b5a039",
"body": "fix(protocol): detect half-open WebSocket via ping/pong heartbeat",
"is_bot": false,
"headline": "Merge pull request #115 from Sendspin/fix/ws-heartbeat-deadline",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T22:49:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb6fe17ee90784c2d9c6ea762206a3e48da785ea",
"body": null,
"is_bot": false,
"headline": "fix(protocol): detect half-open WebSocket via ping/pong heartbeat",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T22:46:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "125fb6e23e10cb88bfa58ac15e362899ef0dab22",
"body": "feat(sendspin): broadcast metadata on playback-state change and on demand",
"is_bot": false,
"headline": "Merge pull request #114 from Sendspin/feat/server-metadata-on-play",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T22:20:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "748f8c1e24edfd1bb1ded2a04e7440a82b6eba1d",
"body": "…mand",
"is_bot": false,
"headline": "feat(sendspin): broadcast metadata on playback-state change and on de…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T22:14:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "377431ef2c06160186e9ffacd9e0cf892704a820",
"body": "fix(sendspin): merge metadata updates with tristate semantics",
"is_bot": false,
"headline": "Merge pull request #113 from Sendspin/fix/metadata-tristate-merge",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T21:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8e0e737176598e7d6861d6f54b534cfca588090",
"body": null,
"is_bot": false,
"headline": "fix(sendspin): drop unused metadata helpers",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T21:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0c6f221a1d084a5206a073c2d7d3a4f3dfcc068",
"body": "Server diff_updates omit unchanged fields and null-clear cleared ones.\nReceiver now distinguishes the two via MetadataState.HasField and applies\nupdates at their server-clock timestamp instead of on receipt.",
"is_bot": false,
"headline": "fix(sendspin): merge metadata updates with tristate semantics",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T21:37:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd55aad520a516e6e38bfb8ef3d3c3a56d9664eb",
"body": "feat(sync): adopt time-sync burst pattern, drop RTT-discard",
"is_bot": false,
"headline": "Merge pull request #112 from Sendspin/feat/time-sync-burst-pattern",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T21:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c42b1a9590e99f4c0a1f8d14457aacf11c5a563",
"body": "docs(sync): drop misleading (0,1] hint from MaxErrorScale comment",
"is_bot": false,
"headline": "Merge pull request #111 from Sendspin/docs/sync-maxerrorscale-comment",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T20:59:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5efbd431e2b0ebeb448941cde2cc07a57a9ad202",
"body": "fix(conformance): drop redundant symlink that breaks multi-worktree usage",
"is_bot": false,
"headline": "Merge pull request #110 from Sendspin/fix/conformance-worktree-symlink",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T20:59:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d2d48cabdee2068ab761ede96c4c639a0e908b0",
"body": "fix(pre-commit): build sendspin-server, drop deleted cmd/test-sync",
"is_bot": false,
"headline": "Merge pull request #109 from Sendspin/fix/pre-commit-phantom-binary",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T20:58:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd43b1d34cc5c0e025764af0c616d60c9770ff3e",
"body": "fix(sync): correct stale default value in test error message",
"is_bot": false,
"headline": "Merge pull request #108 from Sendspin/fix/clock-test-stale-string",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T20:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5db867cd2fb12c8c074975277b492a5cd1d6603",
"body": "fix(sendspin): bind ephemeral ports in tests via Server.Addr",
"is_bot": false,
"headline": "Merge pull request #107 from Sendspin/fix/pkg-sendspin-test-flakes",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T20:48:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58a41f1fc8522335c7115146aad7760f01bc4c46",
"body": "Mirrors sendspin-cpp/time_burst: bursts of 8 every 10s, best sample\nfeeds the filter. Quality now σ-based via filter.GetError().",
"is_bot": false,
"headline": "feat(sync): adopt time-sync burst pattern, drop RTT-discard",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T18:05:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "024e8e48535889d131d67e86e44eca4c7e739f8f",
"body": null,
"is_bot": false,
"headline": "docs(sync): drop misleading (0,1] hint from MaxErrorScale comment",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T17:18:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a3ef0f87cbd4692b5401a1ee47c5ea996663a2f",
"body": "Server.Start now creates the listener with net.Listen explicitly and\nexposes the bound address via Server.Addr, so tests can use Port: 0\nand read the actual port back. Replaces 9 hardcoded ports (8928-8937)\nthat collided under parallel test runs.\n\nNewServer no longer rewrites Port: 0 to 8927; that d\n[…]\npplied\nby the CLI flag layer (cmd/sendspin-server, examples). Library callers\nthat want the documented default must set it explicitly, matching Go\nconvention where Port: 0 means OS-assigned ephemeral.",
"is_bot": false,
"headline": "fix(sendspin): bind ephemeral ports in tests via Server.Addr",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T04:02:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "052d2af77e60ecb94a739e037a2ee4a8c97145aa",
"body": "…sage",
"is_bot": false,
"headline": "fix(conformance): drop redundant symlink that breaks multi-worktree u…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T02:23:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5611a040c1d742fd7171eb92f202569d78c108a",
"body": null,
"is_bot": false,
"headline": "fix(pre-commit): build sendspin-server, drop deleted cmd/test-sync",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T02:19:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dd2cfeb427445ed0c0fbb6e374538203cd12252",
"body": null,
"is_bot": false,
"headline": "fix(sync): correct stale default value in test error message",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T02:16:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aafdb6a869424354330b02ca6cb6acda200b5cd8",
"body": "…cal-defaults\n\nfeat(sync): adopt canonical Sendspin/time-filter defaults",
"is_bot": false,
"headline": "Merge pull request #106 from Sendspin/feat/phase-b-time-filter-canoni…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T02:15:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f690092da3d377cc4016160b37dff5b2f994cd36",
"body": null,
"is_bot": false,
"headline": "feat(sync): adopt canonical Sendspin/time-filter defaults",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T02:08:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e903962cf138154b0f262ab84d25a8d19e09b42e",
"body": "…ror-scale\n\nFeat/phase a time filter max error scale",
"is_bot": false,
"headline": "Merge pull request #105 from Sendspin/feat/phase-a-time-filter-max-er…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T01:39:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47550927273fb716708946379d3adcf95a0e0e63",
"body": null,
"is_bot": false,
"headline": "docs(sync): trim verbose doc comments",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T01:38:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57d5d778b5ccaa21f56759eefa0281408b03be9a",
"body": "MaxErrorScale defaults to 1.0; no behavior change.",
"is_bot": false,
"headline": "feat(sync): add MaxErrorScale, GetCovariance, NewClockSyncWithConfig",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-05T01:21:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15a37f7f4480270aa5ccfb2050697d50440ebc4d",
"body": "fix(player/malgo): pin period to 20ms and bump malgo to v0.11.24",
"is_bot": false,
"headline": "Merge pull request #104 from Sendspin/fix/malgo-period-size",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-04T11:21:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49e68eb6871a908093f6f6044a84972870d00953",
"body": "mackron/miniaudio#877 documents an exact match for the Pi3/bcm2835\ncallback-stall pantherale0 reported in #96: the audio data callback\nfires a small number of times (1-3 in #877, 4-5 in pantherale0's\nruns), then ceases entirely while ma_device_is_started() continues\nto report true. The producer fill\n[…]\nuild ./... and go test -race ./... clean across all\n12 packages on Windows host with the bumped module. The bcm2835\ncase can only be confirmed on hardware; pantherale0 (#96) has\nvolunteered to retest.",
"is_bot": false,
"headline": "fix(player/malgo): pin period to 20ms and bump malgo to v0.11.24",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-04T11:15:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5929ccaabf1395d8b14e7de1617f34aae1ea06ee",
"body": "fix(deps): drop phantom libflac and libopusfile runtime deps",
"is_bot": false,
"headline": "Merge pull request #103 from Sendspin/chore/drop-phantom-audio-deps",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-04T10:36:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41773103d3324d5d909c116b715a3ba1ec3b6050",
"body": "gopkg.in/hraban/opus.v2 splits into two layers — the always-on libopus\nlinkage (decoder.go, encoder.go, opus.go, errors.go) and an optional\nopus.Stream API gated by `// +build !nolibopusfile` (stream.go,\nstream_errors.go, streams_map.go, callbacks.c) which is the only\nconsumer of libopusfile. We nev\n[…]\nith the tag set;\n`go list -f .GoFiles gopkg.in/hraban/opus.v2` excludes stream.go /\nstream_errors.go / streams_map.go with the tag, includes them\nwithout it. Bash syntax of both shell scripts checked.",
"is_bot": false,
"headline": "fix(deps): build with -tags=nolibopusfile, drop libopusfile dependency",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-04T10:32:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cdfbb0fc86412fbdff3a407af50d44f43279a922",
"body": "The pi quickstart script and install-deps.sh both apt-installed libflac\n(libflac12 / libflac-dev / flac-devel / flac), but the codebase has no\ncgo dependency on it: pkg/audio/decode/flac.go and\ninternal/server/flac_encoder.go both use github.com/mewkiz/flac, which\nis pure Go. Verified by grepping fo\n[…]\nmatch reality.\n\nREADME.md was already correct (its install steps never listed libflac).\nDesign docs under docs/superpowers/{specs,plans} that mention libflac12\nare historical artifacts and left as-is.",
"is_bot": false,
"headline": "fix(deps): drop phantom libflac dependency, fixes Trixie quickstart",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-04T10:32:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "43188275d7deab732914c508383883535a55d407",
"body": "feat(player): cap advertised SupportedFormats by output device probe",
"is_bot": false,
"headline": "Merge pull request #102 from Sendspin/feat/output-capability-cap",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-04T10:12:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a458314350ae10d1a9a75a26b7a0fb2ff93be414",
"body": null,
"is_bot": false,
"headline": "style(test): gofmt config_test.go ints map alignment",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-04T10:08:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55cfb1a40803548d88b6cb83b5602209931f9d8f",
"body": "Comments that read fine when written (\"Pre-1.6.3 this was a const\",\n\"from the design discussion\", \"Future bug reports include this line\",\n\"the new output-capability override keys\") become confusing or wrong as\nthe codebase moves on. Per project comment style, \"why\" explanations\nthat survive the next\n[…]\n/player_test.go, config_test.go: drop \"design discussion\"\n and \"new\" framing; tests should describe invariants, not history.\n * pkg/audio/output/query_test.go: add the missing second ABOUTME line.",
"is_bot": false,
"headline": "style(comments): drop task-referential framing per OHF style",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-04T10:03:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fcd991956889b44a67e058e5372e449a159f38ed",
"body": "Pre-1.6.3 every player on every host advertised the same hardcoded\n11-entry SupportedFormats list — pcm/flac at 192/24 down to opus at\n48/16 — regardless of what the local audio device could actually drain.\nServers that match against source format (Music Assistant streaming\n192k/24-bit) would happil\n[…]\nSA's optimistic ceiling), but\nthe workaround is now one config line: \"max_sample_rate: 48000\".\n\n15 new tests cover filter behavior, probe helpers, override-skip-probe,\nand YAML/env overlay round-trip.",
"is_bot": false,
"headline": "feat(player): cap advertised SupportedFormats by output device probe",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-04T09:55:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc31489cbf38ab53107834f4824c5cfb3dce0636",
"body": "Pre-1.6.3 internal/version.Version was a const, which Go's link-time -X\nflag silently ignores — only package-level string vars are patchable.\nThe release workflow has always passed\n -ldflags \"-X .../internal/version.Version=${tag}\"\nbut every binary shipped reported the hardcoded default (\"1.6.0\" si\n[…]\n that just checks the\nsymbols are non-empty (immutability is precisely what we gave up to make\nldflags work).\n\nBump the in-source default to 1.6.3 so untagged dev builds report a\nsensible version too.",
"is_bot": false,
"headline": "fix(version): make Version a var so ldflags -X actually patches it",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-04T09:54:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9a6782208eb5a57b6c3393e8e483f7a7b55173ff",
"body": "feat: Pi quickstart script for prebuilt-binary install",
"is_bot": false,
"headline": "Merge pull request #100 from chrisuthe/feat/pi-quickstart",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T01:31:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b2f1cfc979b149da7161d1918e1132d1b22947a",
"body": "…-player-linux-arm64)\n\nSmoke test against the real v1.6.2 release tarball revealed that the\nrelease pipeline ships the binary as 'sendspin-player-linux-arm64',\nnot 'sendspin-player'. The install_binary check expected the latter\nand bailed with 'Tarball did not contain expected binary'.\n\nSource the in-tarball name from ${BINARY_NAME}-linux-arm64 so the\nextract path and install source match what tar produces.",
"is_bot": false,
"headline": "fix(quickstart): match release tarball's actual binary name (sendspin…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T01:13:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d075216d6b7c238012f95e2a2237cd45ff9a3091",
"body": null,
"is_bot": false,
"headline": "docs(readme): add Pi quickstart section",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T01:02:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dd658313313c6b9d69b44fc73d4146e6e90b454",
"body": null,
"is_bot": false,
"headline": "chore(ci): run shellcheck on shell scripts in lint job",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T01:01:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2e87296745fe46d0504fc855fae89dacefae06b",
"body": null,
"is_bot": false,
"headline": "chore(quickstart): drop SC2034 disable now that all vars are used",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T01:00:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d32d6b23d88b663f12989dbb1419fafa04324604",
"body": null,
"is_bot": false,
"headline": "feat(quickstart): start/enable service, health-check, success message",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T00:59:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c064e132bf865b1394e3598e3816611a047b0d92",
"body": null,
"is_bot": false,
"headline": "feat(quickstart): install YAML config only if missing",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T00:57:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "004fd46e8c5dbacc7fc38ecf8ad7fa4ccea04b99",
"body": "…ndling",
"is_bot": false,
"headline": "feat(quickstart): install env file with shell-safe --name/--device ha…",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T00:57:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bdd8e9739c0f896e48c1a5a3483256ed3ca26c7",
"body": null,
"is_bot": false,
"headline": "feat(quickstart): install systemd unit from tagged ref",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T00:55:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57dcca44d9a76bd4912a105aa28bcf40242699e8",
"body": null,
"is_bot": false,
"headline": "feat(quickstart): download release tarball into tempdir, install binary",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T00:55:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e35a03ec56708ebb1e239923beeb865325c4807",
"body": null,
"is_bot": false,
"headline": "feat(quickstart): stop running service before binary swap",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T00:53:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16458df2836d21d58075ffe9f1cf3ec4ca1048ef",
"body": null,
"is_bot": false,
"headline": "feat(quickstart): resolve version via GitHub latest-release redirect",
"author_name": "Chris",
"author_login": "chrisuthe",
"committed_at": "2026-05-02T00:53:32Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 19,
"commits_last_year": 432,
"latest_release_at": "2026-07-18T19:58:27Z",
"latest_release_tag": "v1.8.2",
"releases_from_tags": false,
"days_since_last_push": 8,
"active_weeks_last_year": 13,
"days_since_latest_release": 11,
"mean_days_between_releases": 10.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/Sendspin/sendspin-go",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/Sendspin/sendspin-go",
"is_deprecated": false,
"latest_version": "v1.8.2",
"repository_url": "https://github.com/Sendspin/sendspin-go",
"versions_count": 20,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T19:53:09Z",
"latest_version_yanked": null,
"days_since_latest_publish": 11
}
]
},
"popularity": {
"forks": 9,
"stars": 29,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2025-12-10",
"count": 1
},
{
"date": "2025-12-19",
"count": 1
},
{
"date": "2026-01-20",
"count": 1
},
{
"date": "2026-04-07",
"count": 1
},
{
"date": "2026-05-04",
"count": 1
},
{
"date": "2026-06-22",
"count": 2
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
}
],
"complete": true,
"collected": 9,
"total_forks": 9
},
"star_history": null,
"open_issues_and_prs": 21
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 29816,
"source_files_sampled": 101,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 8669
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/charmbracelet/bubbletea",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.10"
},
{
"name": "github.com/charmbracelet/lipgloss",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/gen2brain/malgo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.11.24"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/gorilla/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.3"
},
{
"name": "github.com/hajimehoshi/go-mp3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.4"
},
{
"name": "github.com/hashicorp/mdns",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.6"
},
{
"name": "github.com/mewkiz/flac",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.13"
},
{
"name": "gopkg.in/hraban/opus.v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.0-20230925203106-0188a62cb302"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 101,
"open_issues": 20,
"closed_ratio": 0.636,
"closed_issues": 35,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "chrisuthe",
"commits": 302,
"avatar_url": "https://avatars.githubusercontent.com/u/26907395?v=4"
},
{
"type": "User",
"login": "harperreed",
"commits": 111,
"avatar_url": "https://avatars.githubusercontent.com/u/18504?v=4"
},
{
"type": "User",
"login": "claude",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
},
{
"type": "User",
"login": "balloob",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/1444314?v=4"
},
{
"type": "User",
"login": "Meneldor",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/693248?v=4"
},
{
"type": "User",
"login": "abmantis",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/974569?v=4"
}
],
"contributors_sampled": 6,
"top_contributor_share": 0.706
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"conformance.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/9 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "12 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "c61a40513249b22de9a5077b0acd1b4682a0b697",
"ran_at": "2026-07-29T23:41:42Z",
"aggregate_score": 3.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-18T21:29:00Z",
"oldest_open_prs": [
{
"number": 160,
"created_at": "2026-07-21T12:49:30Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-21T12:28:53Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 41,
"created_at": "2026-04-15T13:15:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 42,
"created_at": "2026-04-15T13:16:02Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 43,
"created_at": "2026-04-15T13:16:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 44,
"created_at": "2026-04-15T13:16:13Z",
"last_comment_at": "2026-05-05T13:36:56Z",
"last_comment_author": "axelsimon"
},
{
"number": 45,
"created_at": "2026-04-15T13:16:20Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 46,
"created_at": "2026-04-15T13:16:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 49,
"created_at": "2026-04-15T13:16:48Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 50,
"created_at": "2026-04-15T13:16:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 51,
"created_at": "2026-04-15T13:16:59Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 52,
"created_at": "2026-04-15T13:17:06Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 59,
"created_at": "2026-04-15T18:37:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 91,
"created_at": "2026-04-20T14:50:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 93,
"created_at": "2026-04-20T15:36:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 96,
"created_at": "2026-04-24T09:23:28Z",
"last_comment_at": "2026-05-04T19:57:05Z",
"last_comment_author": "pantherale0"
},
{
"number": 118,
"created_at": "2026-05-27T09:52:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 120,
"created_at": "2026-05-27T09:52:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 121,
"created_at": "2026-05-27T09:52:56Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 126,
"created_at": "2026-05-27T09:53:05Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 130,
"created_at": "2026-05-29T01:20:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 143,
"created_at": "2026-06-21T20:08:09Z",
"last_comment_at": "2026-06-24T06:58:15Z",
"last_comment_author": "spockfish"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/Sendspin/sendspin-go",
"host": "github.com",
"name": "sendspin-go",
"owner": "Sendspin"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 61 is calibrated to 67 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 61,
"calibrated": 67,
"calibration": "2026-08-02"
}
}
],
"value": 67,
"inputs": {
"security": 32,
"vitality": 76,
"community": 40,
"governance": 61,
"calibration": "2026-08-02",
"engineering": 82,
"ai_readiness": 79,
"weighted_overall_raw": 61
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 76,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"commits_last_year": 432,
"human_commit_share": 1,
"days_since_last_push": 8,
"active_weeks_last_year": 13
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 8 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "13/52 weeks with commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 13
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "432 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 432
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 19,
"latest_release_tag": "v1.8.2",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 10.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "19 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 19
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~10.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 10.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 16,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 16 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 16
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 40,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"forks": 9,
"stars": 29,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "29 stars",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 29
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "9 forks",
"points": 7.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 9
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 61,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 6,
"top_contributor_share": 0.706
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 71% of commits",
"points": 6.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 71
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "6 contributors",
"points": 8.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 6
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"merged_prs": 101,
"open_issues": 20,
"closed_issues": 35,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.636,
"closed_unmerged_prs": 3,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "64% of issues closed",
"points": 26.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 64
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "101/104 decided PRs merged",
"points": 29.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 101,
"decided": 104
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/9 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"followers": 141,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "Sendspin",
"public_repos": 21,
"account_age_days": 419
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "141 followers of Sendspin",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 141,
"login": "Sendspin"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "21 public repos, account ~1 yr old",
"points": 12.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 21
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/Sendspin/sendspin-go"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 11
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 11 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 11
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "20 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 20
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 82,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "exceptional",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 32,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 32,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/9 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "12 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 79,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.97,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 8669
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "97 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 97,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.11,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "11 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 11,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 29816,
"source_files_sampled": 101,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/101 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 101,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"application"
],
"labels": [
"tui"
],
"scores": {
"tui": 4,
"library": 3
},
"primary": "tui",
"evidence": [
{
"tier": "dependencies",
"label": "tui",
"source": "dep:github.com/charmbracelet/bubbletea",
"weight": 4
},
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 3
}
],
"artifacts": [],
"confidence": "low",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": false
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-29T23:41:57.111623Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/Sendspin/sendspin-go.svg",
"full_name": "Sendspin/sendspin-go",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with Sendspin/sendspin-go. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
