anyproto/anytype-heart holds a health index of 80 out of 100, placing it in the Good band. It scores highest on Vitality (96/100) and lowest on Security (52/100). It was last updated today. 3 contributors account for most of its recent work.
80
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
80
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — 6 affected: google.golang.org/grpc v1.81.1 (critical 9.1), github.com/ethereum/go-ethereum v1.13.15 (high 7.5), github.com/golang-jwt/jwt v3.2.2+incompatible (high 7.5), +3 more
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
24.4/40
No advisories left outstanding — 4 advisory-carrying package(s) unaddressed past 90 days; oldest published 487 days ago
Inputs used
source
osv
advisories
28
affected_packages
8
assessed_packages
280
unassessed_packages
2
affected_by_severity
critical 1, high 3, moderate 1, low 1, unknown 2
direct_affected_packages
6
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 280 resolved dependencies against OSV. 2 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch npm package 'anytype-ts-bindings' from its registry
More detail
Star and fork history 0 ★ / 113 ⇿
0Stars
113Forks
100Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 2Patch 19
Each point covers 3 days.
OpenSSF Scorecard 5.5 / 10
5.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-22 18:43 UTC
Full resolved dependency set from the GitHub dependency graph: 108 direct and 174 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
This repository publishes no package the index resolves, so its own dependency graph was assessed — 280 packages, which also include development and test pins that never ship: 8 carry known advisories, of which 6 are direct. 2 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.
Package
Version
Relation
Severity
Advisories
Fixed in
google.golang.org/grpc
v1.81.1
direct
critical
1
1.82.1
github.com/ethereum/go-ethereum
v1.13.15
direct
high
10
1.17.0
github.com/golang-jwt/jwt
v3.2.2+incompatible
direct
high
2
5.2.2
golang.org/x/image
v0.27.0
direct
high
10
0.43.0
github.com/go-chi/chi/v5
v5.2.1
direct
moderate
2
5.2.2
github.com/disintegration/imaging
v1.6.2
indirect
low
1
—
github.com/yuin/goldmark
v1.7.8
direct
unknown
1
1.7.17
golang.org/x/crypto
v0.54.0
indirect
unknown
1
—
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"e2ee",
"local-first",
"offline-first",
"p2p",
"privacy",
"anytype"
],
"is_fork": false,
"size_kb": 323176,
"has_wiki": false,
"homepage": "https://anytype.io",
"languages": {
"C": 350,
"Go": 10419857,
"Nix": 1800,
"Shell": 1333,
"Makefile": 25358,
"Dockerfile": 708,
"JavaScript": 265
},
"pushed_at": "2026-07-21T23:07:43Z",
"created_at": "2023-05-24T12:59:48Z",
"owner_type": "Organization",
"updated_at": "2026-07-22T05:41:52Z",
"description": "Shared library for Anytype clients",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "develop",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://any.org",
"name": "Any Association",
"type": "Organization",
"login": "anyproto",
"company": null,
"location": "Switzerland",
"followers": 6180,
"avatar_url": "https://avatars.githubusercontent.com/u/128061343?v=4",
"created_at": "2023-03-16T14:22:00Z",
"is_verified": null,
"public_repos": 90,
"account_age_days": 1224
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.50.17",
"kind": "patch",
"published_at": "2026-07-18T00:14:00Z"
},
{
"tag": "v0.50.18-nightly.20260718.1",
"kind": "prerelease",
"published_at": "2026-07-18T02:10:50Z"
},
{
"tag": "v0.50.16",
"kind": "patch",
"published_at": "2026-07-17T22:05:06Z"
},
{
"tag": "v0.50.16-nightly.20260716.1",
"kind": "prerelease",
"published_at": "2026-07-16T02:10:43Z"
},
{
"tag": "v0.50.15",
"kind": "patch",
"published_at": "2026-07-10T20:59:26Z"
},
{
"tag": "v0.50.16-nightly.20260711.1",
"kind": "prerelease",
"published_at": "2026-07-11T02:23:33Z"
},
{
"tag": "v0.50.15-nightly.20260710.1",
"kind": "prerelease",
"published_at": "2026-07-10T02:39:08Z"
},
{
"tag": "v0.50.14",
"kind": "patch",
"published_at": "2026-07-08T20:06:02Z"
},
{
"tag": "v0.50.15-nightly.20260708.1",
"kind": "prerelease",
"published_at": "2026-07-08T21:55:58Z"
},
{
"tag": "v0.50.14-nightly.20260707.1",
"kind": "prerelease",
"published_at": "2026-07-07T23:44:14Z"
},
{
"tag": "v0.50.13",
"kind": "patch",
"published_at": "2026-07-03T21:35:22Z"
},
{
"tag": "v0.50.14-nightly.20260704.1",
"kind": "prerelease",
"published_at": "2026-07-04T02:07:32Z"
},
{
"tag": "v0.50.13-nightly.20260701.1",
"kind": "prerelease",
"published_at": "2026-07-01T02:32:47Z"
},
{
"tag": "v0.50.12",
"kind": "patch",
"published_at": "2026-06-27T14:26:35Z"
},
{
"tag": "v0.50.13-nightly.20260628.1",
"kind": "prerelease",
"published_at": "2026-06-28T02:24:39Z"
},
{
"tag": "v0.50.11",
"kind": "patch",
"published_at": "2026-06-26T12:28:52Z"
},
{
"tag": "v0.50.12-nightly.20260627.1",
"kind": "prerelease",
"published_at": "2026-06-27T02:28:56Z"
},
{
"tag": "v0.50.11-nightly.20260626.1",
"kind": "prerelease",
"published_at": "2026-06-26T02:41:24Z"
},
{
"tag": "v0.50.10",
"kind": "patch",
"published_at": "2026-06-17T16:03:01Z"
},
{
"tag": "v0.50.11-nightly.20260618.1",
"kind": "prerelease",
"published_at": "2026-06-18T02:40:53Z"
},
{
"tag": "v0.50.9-alpha1",
"kind": "prerelease",
"published_at": "2026-06-12T23:47:45Z"
},
{
"tag": "v0.50.9-nightly.20260613.1",
"kind": "prerelease",
"published_at": "2026-06-13T02:35:57Z"
},
{
"tag": "v0.50.9-nightly.20260612.1",
"kind": "prerelease",
"published_at": "2026-06-12T02:50:54Z"
},
{
"tag": "v0.50.9-nightly.20260611.1",
"kind": "prerelease",
"published_at": "2026-06-11T02:51:01Z"
},
{
"tag": "v0.50.8",
"kind": "patch",
"published_at": "2026-06-02T17:45:59Z"
},
{
"tag": "v0.50.9-nightly.20260603.1",
"kind": "prerelease",
"published_at": "2026-06-03T02:53:56Z"
},
{
"tag": "v0.50.7",
"kind": "patch",
"published_at": "2026-05-29T18:12:08Z"
},
{
"tag": "v0.50.8-nightly.20260530.1",
"kind": "prerelease",
"published_at": "2026-05-30T02:11:56Z"
},
{
"tag": "v0.50.7-nightly.20260527.1",
"kind": "prerelease",
"published_at": "2026-05-27T02:27:26Z"
},
{
"tag": "v0.50.7-nightly.20260522.1",
"kind": "prerelease",
"published_at": "2026-05-22T02:31:18Z"
},
{
"tag": "v0.50.6",
"kind": "patch",
"published_at": "2026-05-19T17:43:34Z"
},
{
"tag": "v0.50.6-nightly.20260515.1",
"kind": "prerelease",
"published_at": "2026-05-15T02:29:50Z"
},
{
"tag": "v0.50.5",
"kind": "patch",
"published_at": "2026-05-13T19:55:24Z"
},
{
"tag": "v0.50.6-nightly.20260514.1",
"kind": "prerelease",
"published_at": "2026-05-14T02:38:35Z"
},
{
"tag": "v0.50.5-nightly.20260509.1",
"kind": "prerelease",
"published_at": "2026-05-09T02:37:32Z"
},
{
"tag": "v0.50.5-nightly.20260508.1",
"kind": "prerelease",
"published_at": "2026-05-08T02:28:49Z"
},
{
"tag": "v0.50.4",
"kind": "patch",
"published_at": "2026-05-04T18:25:23Z"
},
{
"tag": "v0.50.5-nightly.20260505.1",
"kind": "prerelease",
"published_at": "2026-05-05T02:41:25Z"
},
{
"tag": "v0.50.4-nightly.20260501.1",
"kind": "prerelease",
"published_at": "2026-05-01T02:46:58Z"
},
{
"tag": "v0.50.4-nightly.20260430.1",
"kind": "prerelease",
"published_at": "2026-04-30T02:20:13Z"
},
{
"tag": "v0.50.3",
"kind": "patch",
"published_at": "2026-04-29T14:11:29Z"
},
{
"tag": "v0.50.2",
"kind": "patch",
"published_at": "2026-04-29T13:09:42Z"
},
{
"tag": "v0.50.0",
"kind": "minor",
"published_at": "2026-04-28T16:56:03Z"
},
{
"tag": "v0.50.2-nightly.20260429.1",
"kind": "prerelease",
"published_at": "2026-04-29T02:17:47Z"
},
{
"tag": "v0.50.1",
"kind": "patch",
"published_at": "2026-04-28T18:17:29Z"
},
{
"tag": "v0.50.0-rc7",
"kind": "prerelease",
"published_at": "2026-04-27T19:03:02Z"
},
{
"tag": "v0.49.1-nightly.20260428.1",
"kind": "prerelease",
"published_at": "2026-04-28T02:36:54Z"
},
{
"tag": "v0.49.1-nightly.20260426.1",
"kind": "prerelease",
"published_at": "2026-04-26T02:19:04Z"
},
{
"tag": "v0.50.0-rc06",
"kind": "prerelease",
"published_at": "2026-04-25T11:55:41Z"
},
{
"tag": "v0.49.1-nightly.20260425.1",
"kind": "prerelease",
"published_at": "2026-04-25T02:18:42Z"
},
{
"tag": "v0.49.1-nightly.20260424.1",
"kind": "prerelease",
"published_at": "2026-04-24T02:11:45Z"
},
{
"tag": "v0.50.0-rc05",
"kind": "prerelease",
"published_at": "2026-04-23T21:40:20Z"
},
{
"tag": "v0.50.0-rc04",
"kind": "prerelease",
"published_at": "2026-04-23T18:06:56Z"
},
{
"tag": "v0.49.1-nightly.20260423.1",
"kind": "prerelease",
"published_at": "2026-04-23T02:12:05Z"
},
{
"tag": "v0.50.0-rc03",
"kind": "prerelease",
"published_at": "2026-04-22T15:47:21Z"
},
{
"tag": "v0.49.1-nightly.20260422.1",
"kind": "prerelease",
"published_at": "2026-04-22T02:22:39Z"
},
{
"tag": "v0.50.0-rc02",
"kind": "prerelease",
"published_at": "2026-04-21T17:50:59Z"
},
{
"tag": "v0.49.1-nightly.20260421.1",
"kind": "prerelease",
"published_at": "2026-04-21T02:33:30Z"
},
{
"tag": "v0.49.1-nightly.20260418.1",
"kind": "prerelease",
"published_at": "2026-04-18T02:13:31Z"
},
{
"tag": "v0.49.1-nightly.20260417.1",
"kind": "prerelease",
"published_at": "2026-04-17T02:31:02Z"
},
{
"tag": "v0.49.1-nightly.20260416.1",
"kind": "prerelease",
"published_at": "2026-04-16T02:16:56Z"
},
{
"tag": "v0.49.1-nightly.20260415.1",
"kind": "prerelease",
"published_at": "2026-04-15T02:31:30Z"
},
{
"tag": "v0.49.1-nightly.20260409.1",
"kind": "prerelease",
"published_at": "2026-04-09T02:25:12Z"
},
{
"tag": "v0.49.1-nightly.20260408.1",
"kind": "prerelease",
"published_at": "2026-04-08T02:30:17Z"
},
{
"tag": "v0.50.0-rc01",
"kind": "prerelease",
"published_at": "2026-04-07T15:37:37Z"
},
{
"tag": "v0.49.1-nightly.20260404.1",
"kind": "prerelease",
"published_at": "2026-04-04T02:12:26Z"
},
{
"tag": "v0.49.1-nightly.20260403.1",
"kind": "prerelease",
"published_at": "2026-04-03T02:26:28Z"
},
{
"tag": "v0.49.1-nightly.20260402.1",
"kind": "prerelease",
"published_at": "2026-04-02T02:20:47Z"
},
{
"tag": "v0.48.6-nightly.20260401.1",
"kind": "prerelease",
"published_at": "2026-04-01T02:26:30Z"
},
{
"tag": "v0.48.6-nightly.20260331.1",
"kind": "prerelease",
"published_at": "2026-03-31T02:19:41Z"
},
{
"tag": "v0.48.6-nightly.20260328.1",
"kind": "prerelease",
"published_at": "2026-03-28T02:32:57Z"
},
{
"tag": "v0.48.6-nightly.20260327.1",
"kind": "prerelease",
"published_at": "2026-03-27T02:31:38Z"
},
{
"tag": "v0.48.6-nightly.20260326.1",
"kind": "prerelease",
"published_at": "2026-03-26T02:34:29Z"
},
{
"tag": "v0.48.6-nightly.20260325.1",
"kind": "prerelease",
"published_at": "2026-03-25T02:32:30Z"
},
{
"tag": "v0.49.0",
"kind": "minor",
"published_at": "2026-04-01T08:31:15Z"
},
{
"tag": "v0.49.0-rc08",
"kind": "prerelease",
"published_at": "2026-03-24T15:29:18Z"
},
{
"tag": "v0.48.6-nightly.20260324.1",
"kind": "prerelease",
"published_at": "2026-03-24T02:23:10Z"
},
{
"tag": "v0.48.6-nightly.20260323.1",
"kind": "prerelease",
"published_at": "2026-03-23T03:53:48Z"
},
{
"tag": "v0.49.0-rc07",
"kind": "prerelease",
"published_at": "2026-03-20T10:42:31Z"
},
{
"tag": "v0.42.4-nightly.20260318.1",
"kind": "prerelease",
"published_at": "2026-03-18T17:58:30Z"
},
{
"tag": "v0.48.6-nightly.20260318.1",
"kind": "prerelease",
"published_at": "2026-03-18T17:29:44Z"
},
{
"tag": "v0.49.0-rc04",
"kind": "prerelease",
"published_at": "2026-03-18T14:04:19Z"
},
{
"tag": "v0.48.5",
"kind": "patch",
"published_at": "2026-03-16T10:11:30Z"
},
{
"tag": "v0.48.6-nightly.20260317.1",
"kind": "prerelease",
"published_at": "2026-03-17T01:55:40Z"
},
{
"tag": "v0.48.5-nightly.20260314.1",
"kind": "prerelease",
"published_at": "2026-03-14T01:55:55Z"
},
{
"tag": "v0.48.5-nightly.20260313.1",
"kind": "prerelease",
"published_at": "2026-03-13T02:45:51Z"
},
{
"tag": "v0.48.5-nightly.20260312.1",
"kind": "prerelease",
"published_at": "2026-03-12T10:16:31Z"
},
{
"tag": "v0.48.5-nightly.20260310.1",
"kind": "prerelease",
"published_at": "2026-03-10T20:16:28Z"
},
{
"tag": "v0.48.4",
"kind": "patch",
"published_at": "2026-03-10T15:12:29Z"
},
{
"tag": "v0.48.3",
"kind": "patch",
"published_at": "2026-03-09T21:44:57Z"
},
{
"tag": "v0.44.0-nightly.20260310.1",
"kind": "prerelease",
"published_at": "2026-03-10T01:56:39Z"
},
{
"tag": "v0.44.0-nightly.20260307.1",
"kind": "prerelease",
"published_at": "2026-03-07T01:54:49Z"
},
{
"tag": "v0.49.0-rc03",
"kind": "prerelease",
"published_at": "2026-03-06T17:22:38Z"
},
{
"tag": "v0.44.0-nightly.20260306.1",
"kind": "prerelease",
"published_at": "2026-03-06T01:50:05Z"
},
{
"tag": "v0.49.0-rc02",
"kind": "prerelease",
"published_at": "2026-03-05T16:58:51Z"
},
{
"tag": "v0.44.0-nightly.20260305.1",
"kind": "prerelease",
"published_at": "2026-03-05T01:56:55Z"
},
{
"tag": "v0.44.0-nightly.20260228.1",
"kind": "prerelease",
"published_at": "2026-02-28T02:08:13Z"
},
{
"tag": "v0.44.0-nightly.20260227.1",
"kind": "prerelease",
"published_at": "2026-02-27T01:56:04Z"
},
{
"tag": "v0.49.0-rc01",
"kind": "prerelease",
"published_at": "2026-02-26T11:55:51Z"
},
{
"tag": "v0.44.0-nightly.20260226.1",
"kind": "prerelease",
"published_at": "2026-02-26T01:55:07Z"
}
],
"recent_commits": [
{
"oid": "d03cedda1073744beab396559622e7847a955f1f",
"body": "…miter\n\nGO-7382 Cap reindex peak memory with cross-space concurrency limiter",
"is_bot": false,
"headline": "Merge pull request #3217 from anyproto/go-7382-reindex-concurrency-li…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T23:05:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40d29b982cddb96077a7ae454349288fcb9c5a24",
"body": "Bound the outdated-objects reindex pass to 2 concurrent spaces on\niOS/Android and 4 on desktop instead of running one pass per space at\nonce: each pass cold-builds every outdated object into the space's\nobject cache and relies on the 60s TTL to release it, so concurrent\npasses peaked at ~834 MB heap\n[…]\n stuck\nbehind big background spaces. Only the async outdated pass is gated,\nnever the synchronous part of ReindexSpace that blocks space load, and\nacquire refuses to start once the indexer is closing.",
"is_bot": false,
"headline": "GO-7382 Cap reindex peak memory with cross-space concurrency limiter",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T23:02:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c255f3766c5ca54c6f630edb7c95767e24abedaa",
"body": "acl: disable invite link creation for admins",
"is_bot": false,
"headline": "Merge pull request #3206 from anyproto/go-7367-invite-owner-only",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T19:52:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b1eec4bcc5c7d2d619f34db9be778af330b3892",
"body": "GenerateInvite now requires the caller to be space owner before\nbuilding a new invite record, instead of relying solely on the\nany-sync node round-trip to reject it. Existing invite lookups and\ninvite change/revoke are unaffected.",
"is_bot": false,
"headline": "GO-7367 acl: disable invite link creation for admins",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T18:56:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfb44cb39158ea2e7992bb2e2a252c4662b9478c",
"body": "GO-7222 Prefer the workspace invite when it and the space view disagree",
"is_bot": false,
"headline": "Merge pull request #3216 from anyproto/go-7222-prefer-workspace-invite",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T18:50:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14f5dfab2b19f574bba7157ead30f36691888312",
"body": "An old client can write an invite cid to the workspace without clearing the\nowner's space view or the held-by-owner marker -- it knows about neither. That\nleaves the invite present in both objects (and a cid next to a stale marker),\nwith the workspace copy being the live one.\n\nResolve it determinist\n[…]\n over a stale one\n left in the space view.\n\nThe normal cases are unchanged: an owner-held invite leaves no cid in the\nworkspace, so it is still read from the space view; members still see the marker.",
"is_bot": false,
"headline": "GO-7222 Prefer the workspace invite when it and the space view disagree",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T18:48:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "887f1cb5e77988e0db70d4ca254c4073bfe2b4bc",
"body": "GO-7379 Cut cellular-switch recovery latency: bounded node lookups, fast retry, prioritized sweep",
"is_bot": false,
"headline": "Merge pull request #3214 from anyproto/go-7379-cellular-switch-latency",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T15:07:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "663acdd9181359d62700f005f048f4b6604958f8",
"body": "…d evict stale locals\n\nSecond field test (same iOS Wi-Fi->cellular scenario, with the previous\nfix in the build): the node connection re-established instantly this\ntime, then sat idle for 11+ seconds with 8 bytes read. The goroutine\ndump showed all 72 managers parked at the local-peers loop in\nfetch\n[…]\n triggers\n RemoveLocalPeer, which unbounded dials never reached\n- regression tests pin both: node peer served while a local dial is\n parked, local dials carry the budget deadline, stale peer evicted",
"is_bot": false,
"headline": "GO-7379 Publish the node connection before local-peer dials; bound an…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T14:25:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "55068db650f14eb4dc1fc657d6c329521717b838",
"body": "… signals\n\nThe 5s fast retry is meant for the transient window after a network\nswitch, but with a permanently unreachable node and reachable LAN peers\n(LAN without internet, captive portal — the states where local-only P2P\nkeeps syncing) nodeStatus stays ConnectionError forever and the fast\ncadence \n[…]\ncounter so a fresh network change always gets its own fast window —\nincluding a LAN-only device walking out to cellular, whose counter would\notherwise still be saturated from the steady-failure state.",
"is_bot": false,
"headline": "GO-7379 Decay the fast retry after steady failures; reopen on rebuild…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T13:45:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cf670192253ce9bdcc67a1d8617ef6ead01764c0",
"body": "…ast retry, prioritized sweep\n\nField test (iOS, Wi-Fi->cellular, 71 spaces): the recovery pipeline fired\ncorrectly (stats: 2 recoveries, CELLULAR reported, offline=false) but\nmessages still took ~30s. Goroutine dump at +6s showed the whole stall:\nall 71 spaces' fetchResponsiblePeers parked in one si\n[…]\nk service looked up by name; drift\n test in core/block) — the space the user is looking at syncs as soon\n as any responsible connection is up instead of queueing behind dozens\n of background spaces",
"is_bot": false,
"headline": "GO-7379 Cut cellular-switch recovery latency: bounded node lookups, f…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T13:39:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d858323d245bc9ddc9ae047bcab5085f2f7024d9",
"body": "…-recovery\n\nGO-7379 Snappy sync: proactive connection recovery on network/device state changes",
"is_bot": false,
"headline": "Merge pull request #3211 from anyproto/go-7379-snappy-sync-connection…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-17T11:22:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "635ca13679c123f71f4ed753387eb1144ebaaed3",
"body": "- errcheck: handle the error from app.GetComponent explicitly instead of\n blank-discarding it in the debugstat registrations\n- nestif: extract waitResponsiblePeers from GetResponsiblePeers — same\n wait/deadline semantics, flat control flow",
"is_bot": false,
"headline": "GO-7379 Lint: check GetComponent errors, flatten peer-wait nesting",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-16T23:22:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0983304ab3b3167d9d41cf32155369202fe23f73",
"body": "The codegen check regenerates docs/proto.md in CI and diffs; the local\nprotoc-gen-doc produces a different (whole-file) formatting, so the\ncommitted doc must match CI's output — applied from the codegen-diff\nartifact rather than a local regen.",
"is_bot": false,
"headline": "GO-7379 Align generated proto docs with the CI generator",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-16T23:22:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46e015da1e4ca636e40c37f1b4b9fc2904ef88ed",
"body": "Only the generated pb/commands.pb.go conflicted (pb/protos/commands.proto\nmerged cleanly); resolved by re-running make protos-go over the merged\nsources. networkId field intact.",
"is_bot": false,
"headline": "GO-7379 Merge develop; regenerate protos",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-16T11:17:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cdd5a65390c5b232bd3438fb6c304a9d0e51d009",
"body": "Duplicate (no-op) reports were only derivable from networkReports minus\nthe signal counters, and imprecisely. An explicit counter makes the\nclient call pattern directly readable: near-100% duplicates is a\nhealthy client reporting on every OS path callback as documented, zero\nraw reports means the client isn't wired up. One extra atomic on the\nno-op branch.",
"is_bot": false,
"headline": "GO-7379 Count duplicate network reports explicitly",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-16T10:37:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73dac2637bcfaa0f28d6f7bead976aadebe06235",
"body": "Observability for how the recovery mechanism is exercised in the field,\nsurfaced through the existing ProvideStat/debugstat plumbing (debug\nserver stat endpoint):\n\n- networkState: current type/networkId/reported/linkDown/monitor\n snapshot+generation/offline; counters for network reports,\n foregrou\n[…]\n, RPCs — human timescales;\nthe only near-hot-path counter, closed-peer filtering, increments only\nwhen corpses were actually dropped), and snapshots are built lazily\nwhen the stat endpoint is queried.",
"is_bot": false,
"headline": "GO-7379 Expose connectivity-recovery stats via debugstat",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-16T10:32:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6cca51a406d44c4b04fe92692013a219e0c5916b",
"body": "…taken for a duplicate signal\n\nThird-pass review: the trailing-run fingerprint recorded raw snapshot\nvalues, and the clock-jump event fires before the same tick's interface\ncheck — so a wake recovery recorded the pre-sleep snapshot. A short\noutage bracketing the wake (Wi-Fi re-associating to the sam\n[…]\nindow (6s) from the 5s monitor tick: with\nequal values, an event observed exactly one tick after a recovery landed\non the window boundary and leading-vs-coalesced was decided by\nsub-millisecond races.",
"is_bot": false,
"headline": "GO-7379 Fingerprint by monitor generation so a link flap is never mis…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-16T10:26:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8a2fa9d912c2c7b64f53e90ff60670bcde7f8687",
"body": "… logs\n\nSecond-pass review: reporting NOT_CONNECTED must not degrade local-only\nP2P sync (the same manageResponsiblePeers loop that re-dials nodes also\nrefreshes LAN peers, so the 2min offline cadence delayed mDNS peer\npickup). The cadence now stays at 20s whenever the space has local\npeers. The int\n[…]\nrrPeerFindDeadlineExceeded warnings from offline\nhead-sync sweeps downgraded to debug (one warn per loaded space per\nsweep is pure noise on large accounts), and the guide's log-reason\nstrings updated.",
"is_bot": false,
"headline": "GO-7379 Keep full re-dial cadence with LAN peers; quiet offline sweep…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-16T09:28:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac2b7478bc9fb7ba97906205c9a670fc37d63b64",
"body": "…ing teardowns\n\nSecond-pass review findings:\n\n- The loss-only interface trigger missed the way back: an empty->non-empty\n snapshot transition (network restored) fired nothing, so a desktop that\n went fully offline recovered only at the 2min offline-cadence probe —\n a regression vs develop's flat \n[…]\n path id + interface snapshot + link state) against what the leading\n run acted on and skips when nothing changed; a real second change\n (Wi-Fi->cellular right after a wake) still gets its full run.",
"is_bot": false,
"headline": "GO-7379 Fire recovery when connectivity returns; skip duplicate trail…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-16T09:27:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a5519fd4925bd784ebf40565cc92cee0a115479",
"body": "The iOS background->foreground stall that motivated this branch had one\nmore contributor: the foreground recovery flushes the pool (closing\nevery connection) and immediately head-syncs all spaces, but each\nspace's cached responsiblePeers list still held the just-closed peers\nuntil fetchResponsiblePe\n[…]\nclosed peers and falls into the\nexisting deadline-bounded wait when none are alive, so the sync fires\nthe moment the rebuild's fresh dial lands (~0.5-1.5s after foreground)\ninstead of up to 20s later.",
"is_bot": false,
"headline": "GO-7379 Do not serve closed peers from the responsible-peers cache",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-16T08:35:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "312a2da2b5f276f3c0a008aa43aa334d07244b3a",
"body": "The net monitor doubles the 5s interface enumeration cadence, which\nturned this leftover into ~1 line/s of stdout spam.",
"is_bot": false,
"headline": "GO-7379 Remove per-interface debug println on Android",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T22:54:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50221f51d5de690c948737b27f06fa044d059eb2",
"body": "Recovery signals can burst (wake fires the clock-jump detector, the\ninterface diff and the foreground RPC within seconds) and a sweep can\npark up to 1min per space on peer-find deadlines while offline, so\nsweeps could stack goroutines and duplicate diff rounds. One sweep runs\nat a time; a request arriving mid-sweep queues exactly one fresh rerun,\nso late requests still observe a full sweep.",
"is_bot": false,
"headline": "GO-7379 Coalesce overlapping SyncAllSpaceHeads sweeps",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T22:54:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f5d9ba6a61d8cef2c2c12a49ffda683f2d9416e",
"body": "…ate wiring\n\nThe 30s broadcast peer-find deadline (which un-parks the shared\nstreampool dial workers) changed delivery semantics: pre-branch, a\nhead-update broadcast made while offline waited indefinitely and fired\nthe moment peers appeared, so offline edits reached other devices at\nreconnect speed;\n[…]\nt now warns when the component exists but stopped satisfying\nthe interface (previously the rebuild/backoff feature silently turned\noff), and a drift test in core/device pins the copied component name.",
"is_bot": false,
"headline": "GO-7379 Kick a diff round on node reconnect; warn on broken networkSt…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T22:54:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "53dcc5a5383ca05c173fd9eb3935dbce2b60b2f8",
"body": "…gger, deterministic tests\n\nIndependent review findings on the recovery pipeline:\n\n- IsOffline could wedge true and make target devices *slower* than\n develop: the interface heuristic (linkDown) overrode the client's\n explicit WIFI/CELLULAR report (Android getters may not enumerate\n cellular inte\n[…]\ne (fixture ran the real\n net monitor) and mutated package globals read by a live goroutine.\n The clock, scheduler and interface getter are injectable fields now;\n fixtures use a stub interface set.",
"is_bot": false,
"headline": "GO-7379 Review fixes: un-wedgeable IsOffline, loss-only interface tri…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T22:54:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "41d050008d4e7bf645cdb217faa2015317720529",
"body": "…-on-reindex\n\nGO-7378 Fix chat unread counters inflated by reindex reopen",
"is_bot": false,
"headline": "Merge pull request #3210 from anyproto/go-7378-chat-counter-inflation…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T22:49:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8db2a253693cb3f9bd80c7eae378b303c88ad734",
"body": "Reopening a chat whose store lacks the fullyReplayed marker runs a full\nIterateRoot replay over already-stored messages. ChatHandler.BeforeCreate\nbumped the in-memory unread counter, message count and subscription state\nbefore the insert failed with ErrDocExists, and nothing reloaded the cached\nsubs\n[…]\n iff the values diverged (Order-insensitive compare) and\n runs in storeObject.onInit before the first flush, healing clients whose\n counters were already inflated and drift from rolled-back applies.",
"is_bot": false,
"headline": "GO-7378 Fix chat unread counters inflated by reindex reopen",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T22:32:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e536ce359de7713d90ac31ea75e0d44994bdbdad",
"body": "…inks\n\nGO-7377 Index bookmark blocks as outgoing links; set createdInContext on bookmarks",
"is_bot": false,
"headline": "Merge pull request #3209 from anyproto/go-7377-index-bookmark-block-l…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T20:38:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "376d1d0ce69b73561b8709ca5fc10249ed5bb027",
"body": "… on bookmarks\n\nBookmark blocks were never collected as outgoing links (collectOutgoingLinks\nhandled link/file blocks, mentions, dataview embeds, collections and relations\nbut not bookmarks), so a bookmark object got no backlink from the page holding\nit. The context-aware objectgc then misclassified\n[…]\nbump ForceInvalidateObjectsIndexCounter 4->5 so existing pages reindex and\n the missing bookmark backlinks are restored (a plain reindex replaces each\n object's link set, so no link erase is needed)",
"is_bot": false,
"headline": "GO-7377 Index bookmark blocks as outgoing links; set createdInContext…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T19:43:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9f26eb4590da45bc7fc6c60ade2b6d5bd993758e",
"body": "…dseq\n\nGO-7374 Replay the full tree when a store-backed object has never been replayed",
"is_bot": false,
"headline": "Merge pull request #3207 from anyproto/go-7374-store-replay-legacy-ad…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T18:59:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c92cb88de00111756484880a600a4ad5a1bc582",
"body": "GO-7222 Retire revoked invites and keep auto-approve links owner-held",
"is_bot": false,
"headline": "Merge pull request #3208 from anyproto/go-7222-invite-cleanup",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T18:22:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bf13a33df8cc106d0a84356458184fa3a0df042",
"body": "…evokes it\n\nThe anyone-can-join replace path sends two records: revoke-and-rotate,\nthen the replacement invite. A failure between the two used to leave the\nworkspace details pointing at the revoked invite: GetCurrent kept\nserving the dead link, a retry early-returned it, and the sweep deferred\non th\n[…]\n right after the rotation record lands makes every\ndownstream failure converge to a clean no-invite state, and the revoked\ninvite's file is now reported to the cleanup even when the replacement\nfails.",
"is_bot": false,
"headline": "GO-7222 Clear the replaced invite's details as soon as the rotation r…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T18:20:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "59641a4850b348be7b3b8e0078e2df5a23e9e0ca",
"body": null,
"is_bot": false,
"headline": "GO-7222 go generate, go fmt",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T17:04:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2143709ed76f388be1ce6e09b976cfaa1583a7d3",
"body": null,
"is_bot": false,
"headline": "GO-7222 Drop InviteSharing.md from the PR",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T15:20:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6491f9aba96fda6bf4f02d9ead900ed28f275cb5",
"body": "Working doc, not repo content.",
"is_bot": false,
"headline": "GO-7222 Drop the design spec from the PR",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T15:19:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "787170fb286a4d0d63507e4f44be777d46c11a59",
"body": "…nvite\n\nThe revoke path rotates the read key for new revocations (core/acl\nrevokeAllInvites -> RevokeAllInvitesAndRotate). The sweep covers the backlog: an\nanyone-can-join invite revoked by an older client without a rotation. It is found\nby comparing the read key the invite's record maps to against \n[…]\nle of an\ninvite the acl still treats as active, and the node's view lags, so the file is\ndeleted on a later pass once the acl has settled.\n\nCertification is unchanged and written last, after rotation.",
"is_bot": false,
"headline": "GO-7222 Rotate the read key when retiring a revoked anyone-can-join i…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T15:12:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c2f9431903c3136978ec3387d4591f0da6dd6278",
"body": "An anyone-can-join invite embeds the current read key encrypted to the invite\nkey, so revoking it does not stop the holders who saved the link from reading\ncontent created afterwards. When the acl has such an invite, retiring it now also\nrotates the read key, using any-sync's revoke-and-rotate in on\n[…]\nne-can-join invite actually being among the active ones; a\nrequest-to-join invite never exposed the read key, so revoking it does not rotate.\n\nBumps any-sync to v0.12.16 for RevokeAllInvitesAndRotate.",
"is_bot": false,
"headline": "GO-7222 Rotate the read key when retiring an anyone-can-join invite",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-15T13:34:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bbee235f0a063a40940ee8b2fcc3214f4fbf3c9c",
"body": "A published page is public, so applyInviteLink embeds the invite link only when\ndomain.ShareableWithinSpace holds: a request-to-join invite (any permissions) or\nan anyoneCanJoin reader invite. An anyoneCanJoin invite that grants write access\nis skipped -- nobody approves the joins, so a public page must not carry it.\n\nSame rule that gates sharing an invite within the space, applied to publishing.",
"is_bot": false,
"headline": "GO-7222 Do not publish a no-approval writer invite into a public page",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-14T17:19:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44d03e4aa0a2e335f06d2c789bcf7ee9dbb912ef",
"body": "docs/InviteSharing.md: what changed, the InviteGetCurrent answer matrix, the\nshareable rule, and the UX flow (share toggle off by default, confirmation popup,\ndisabled for anyoneCanJoin above reader, publish-later, no un-share, permission\nediting).\n\nSpec: record the two open decisions from review -- the background sweep does not\ncover owner-held invite files, and publishing embeds an owner-held link.",
"is_bot": false,
"headline": "GO-7222 Client integration guide + record review decisions",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-14T16:55:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42e75e16aa1d0e5795a3b087346d4d9675daa1a4",
"body": "Three partial-failure fixes from review, all in the two-object write paths:\n\n- setInviteInfo writes the object that will hold the cid and key before it\n touches the other one. Publishing an owner-held invite used to clear the space\n view (its only copy) before writing the workspace, so a failed wo\n[…]\neft pointing at it.\n\n- Generate's rollback on a failed setInviteInfo clears both objects, so a cid\n persisted to one of them before the failure does not linger pointing at the\n file it then deletes.",
"is_bot": false,
"headline": "GO-7222 Order invite writes so a partial failure never strands the file",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-14T16:52:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4a40929bf900fe9c7b99c0a00c3dc1c8d741ecf",
"body": "Nobody approves a join made through an anyoneCanJoin link: whoever holds it is in\nthe space, with the permissions the invite carries. Read access is as much as a\nmember is trusted to give away, so an invite that grants more than that stays in\nthe owner's account.\n\ndomain.ShareableWithinSpace is the \n[…]\nred\ninvite that grants too much all go through it: generating one, publishing one the\nowner holds, and raising the permissions of one that is already shared. Each is\nrefused with INVITE_NOT_SHAREABLE.",
"is_bot": false,
"headline": "GO-7222 Share an anyoneCanJoin invite only as a reader's link",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-14T16:33:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bc614981bb53346a7e8b09aa6a59124540fdd885",
"body": "InviteGenerate for an invite of the type the space already has now decides on\nthe sharing mode without touching the acl.\n\nAsking for shareWithinSpace on an invite the owner holds publishes it: the same\ncid and key move out of the owner's space view and into the workspace, no acl\nrecord is replaced a\n[…]\nstory has already given that invite's cid and key to every member of\nthe space, and clearing the details would not take it back -- only revoking the\ninvite does, and that is the client's call to make.",
"is_bot": false,
"headline": "GO-7222 Publish an owner-held invite instead of replacing it",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-14T16:14:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "78141f060cf82fa77d9e692467dde36bf98b4452",
"body": "…pace\n\nRpc.Space.InviteGenerate gets a shareWithinSpace flag. Without it the invite's\ncid and key go to the owner's space view, which only their own devices sync, and\nthe workspace -- which every member of the space syncs -- is left with nothing\nbut the spaceInviteHeldByOwner marker. Members read th\n[…]\norkspace as before and any member can\nshare it.\n\nGenerate and Revoke always write both objects, so switching a space between the\ntwo can never leave the previous invite readable where it used to live.",
"is_bot": false,
"headline": "GO-7222 Keep space invites in the owner's account unless shareWithinS…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-14T15:58:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e1fb2b6e4d37d524fb69d5dfba5b2490d1dd3f86",
"body": null,
"is_bot": false,
"headline": "GO-7222 Spec: owner-held invites (shareWithinSpace flag)",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-14T15:31:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b98210eb2a6318f3727b8a57e53ea48bc31ffbbf",
"body": null,
"is_bot": false,
"headline": "GO-7222 Invites cleanup",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-14T13:48:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03334c27374e7178586601e28a9f689ebe1ee0d9",
"body": "…n replayed\n\nany-sync writes the addSeq key onto a stored change only when addSeq > 0, so\nchanges stored before addSeq existed carry no addSeq at all and read back as 0.\nReplay filters changes with addSeq strictly greater than its watermark, so a\nfirst replay (watermark 0) could never see them: rebu\n[…]\nwhich hardcoded pb.Change for every change and\nso corrupted the export of any store-backed object (chat, discussion, account,\ntechspace). This was needed to get trustworthy evidence for the bug above.",
"is_bot": false,
"headline": "GO-7374 Replay the full tree when a store-backed object has never bee…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-13T19:57:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a13b4fa1bd400d439c616b234ffdc8299082ab8c",
"body": "…switch recovery\n\nThe type enum alone cannot express 'same type, different network'\n(Wi-Fi->Wi-Fi SSID switch, cellular PDP re-attach, VPN reconnect), so\nthose OS callbacks were deduped away and recovery waited on the 5s\ninterface poll or transport keepalives. Clients now pass the OS path\nidentity (\n[…]\nry pipeline immediately.\n\nBackward compatible: empty networkId keeps type-only semantics; the\nidentity only counts as changed when known both before and after, so\nolder clients see no behavior change.",
"is_bot": false,
"headline": "GO-7379 Add networkId to DeviceNetworkStateSet for instant same-type …",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-12T00:34:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed4e8465eb3271a7ce0d2c40afb7909808c4fc84",
"body": null,
"is_bot": false,
"headline": "GO-7379 Docs: sync staleness audit and mobile network integration guide",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-11T23:40:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "106c0714729d1f1b1d13e9f087275f7b12613eae",
"body": "The 10s fast ticker only switched to the 1min slow mode on a\n*successful* idle check; while the file node was unreachable (device\noffline mid-upload) it kept polling every 10s indefinitely.",
"is_bot": false,
"headline": "GO-7379 Filesync: back off node-usage poller on errors",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-11T23:40:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fddec3bbcb0cc276f5e041ec92ec1adfbaa4b11a",
"body": "yamux KeepAlivePeriodSec was unset, which any-sync leaves at the\nhashicorp/yamux 30s default: a silently dead TCP conn (sleep, network\nswitch, NAT reset) took 30-40s to detect. 10s ping + 10s pong wait\nbrings that to <=20s. Quic PINGs every 10s (default 25s) keep NAT\nbindings fresh so passive rebinding survives more transitions; the 30s\nquic-go idle timeout still bounds silent-death detection until any-sync\nexposes MaxIdleTimeoutSec (patch prepared on any-sync branch\nnet-quic-idle-timeout).",
"is_bot": false,
"headline": "GO-7379 Tighten transport keepalives for faster dead-conn detection",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-11T23:40:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87e41b9900231b99a29ae3f1e5e2918e84a9ae50",
"body": "…fline\n\n- provider registers a connectivity hook: every recovery signals an\n immediate responsible-peers rebuild in all spaces, so a reconnect\n re-dials right away instead of waiting for the periodic tick, and a\n disconnect flips node status to ConnectionError immediately\n- while the device is kn\n[…]\nSpaceHeads bounds the same wait (1min) instead of parking up\n to 10 goroutines until reconnect\n\nThe device component is looked up by name to avoid an import cycle;\nabsent (tests) means never-offline.",
"is_bot": false,
"headline": "GO-7379 Peermanager: react to connectivity changes, back off while of…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-11T23:40:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b69bd2992f6d20628c315c9b41759141c13790eb",
"body": "A stale connection was only detected by transport keepalives (30-40s\nyamux, 30s quic idle), during which pool.Get kept serving the dead peer\nand the UI showed Synced. Recovery signals now all drive one pipeline:\nflush the connection pool, notify connectivity hooks (peer-manager\nrebuild), head-sync a\n[…]\nrface identity uses IPv4 addrs + IPv6 /64 prefixes so privacy\naddress rotation isn't a false positive. On Android enumeration needs\nthe client-injected getter; the monitor degrades to clock-jump only.",
"is_bot": false,
"headline": "GO-7379 Add connectivity recovery pipeline and net monitor",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-11T23:40:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fbfa62304f8e33c96c60fa480c69d98257f33dba",
"body": "…local-blocks\n\nGO-7366 Fix files stuck in Syncing: confirm sync via file node without local blocks",
"is_bot": false,
"headline": "Merge pull request #3205 from anyproto/go-7366-filesync-bind-without-…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T19:55:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36f5c090266d7bd1e6f3cc568b81cdfbb98d407d",
"body": "GO-7363 Local discovery hardening: deadlock chain, recv death, android lifecycle",
"is_bot": false,
"headline": "Merge pull request #3202 from anyproto/go-7363-zeroconf-hardening",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T19:54:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4268308715924aca2ed1d7ecb1db19306f054996",
"body": "…at-parent\n\nGO-7323 Exclude chat content from ObjectCleanupSuggestions",
"is_bot": false,
"headline": "Merge pull request #3203 from anyproto/go-7323-cleanup-suggestions-ch…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T15:26:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7489daab204395263ce9e2a3d2ec4e887b8340f4",
"body": "GO-7365 Restrict local HTTP surfaces to trusted origins",
"is_bot": false,
"headline": "Merge pull request #3204 from anyproto/go-7365-grpcweb-origin-allowlist",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T15:25:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f462f431b164e23d39ebb8a1173730aa0d9b29b5",
"body": "The Webclipper extension's iframe talks to the proxy directly from a\nchrome-extension:// origin (see extension/lib/util.ts in anytype-ts),\nnot through native messaging, so the new origin allowlist blocked it.\nTrust the extension's known ids, mirroring anytype-ts's\ninstallNativeMessagingHost.ts EXTENSION_IDS list.",
"is_bot": false,
"headline": "GO-7365 Allow Webclipper extension origins on the grpc-web proxy",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T15:23:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4ba1c12ae87b916a1d9e0d057153a43d67c7c6b",
"body": "…ctivity errors\n\nFixes from a four-lens adversarial review of the previous commit:\n\n- A parked item whose availability check succeeds now returns to\n PendingUpload (retry counter reset) before the limit/upload steps, so\n a transient failure after recovery gets the normal 1-minute retry\n instead o\n[…]\ndCids now returns\nErrCIDNotFound for unknown cids instead of panicking), deletion\nresetting a parked item's schedule, retry-delay math, and the\nrecovered-then-transient regression (mutation-verified).",
"is_bot": false,
"headline": "GO-7366 Review fixes: leave MissingBlocks on recovery, back off conne…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T14:27:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "36bacb00918fbc64953a399f238e00bb179b66d2",
"body": "…t local blocks\n\nA file object may reference a fileId whose blocks were never written\nlocally: import dedup reuses an existing fileId cross-space without\nre-adding blocks, while the file object lookup is space-scoped, so\nimporting the same content into a second space creates an object whose\nsync can\n[…]\ne startup\nsweep re-enqueues own non-Synced file objects, which now get verified\nagainst the node, bound, and flipped to Synced (replicated to other\ndevices), with no re-upload and no content download.",
"is_bot": false,
"headline": "GO-7366 Fix files stuck in Syncing: confirm sync via file node withou…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T14:01:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6b6119d7f920f076f98154fae7890c9d7df9c80d",
"body": "DebugRunProfiler runs a CPU/heap/goroutine/trace profiler for a\ncaller-supplied duration and returns the archive. There is no reason an\nanonymous caller needs it before a session exists, and left no-auth it\nwas an anonymous DoS/collection surface. Drop it from noAuthMethods so it\ngoes through scope validation like any other method.",
"is_bot": false,
"headline": "GO-7365 Require auth for DebugRunProfiler",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T01:23:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02177792a7dfda6c713bee8edf86fc0684593b32",
"body": "The local-link challenge shows a 4-digit code (10^4 space) and allows 5\ntries per challenge. Nothing bounded wrong guesses across the whole run,\nso an attacker could keep requesting fresh codes and grind the space —\n50 challenges x 5 tries was ~2.5% per app run.\n\nCount wrong verifications process-wi\n[…]\nbrute\nforce at ~0.2%. A correct verification resets the counter (and the\nper-run request budget), so a user who mistypes a code or pairs another\ndevice is never locked out — only failed guesses count.",
"is_bot": false,
"headline": "GO-7365 Lock local-link pairing after 20 failed code attempts",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T01:17:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d1ec2e4936dbb00ee7464702be1da7cbce0c5cf5",
"body": "noAuthMethods is meant for methods a client must call before a session\ntoken can exist. Three entries did not belong:\n\n- AccountSelect: every client path calls WalletCreateSession first and\n so already holds a token by the time it selects an account. It is\n already listed in limitedScopeMethods, s\n[…]\nl methods are\n LogSend and DebugExportLocalstore); a dead map entry.\n\nCombined with the origin allowlist, this removes the anonymous reach\ninto ObjectImport/AccountSelect that a visited web page had.",
"is_bot": false,
"headline": "GO-7365 Drop over-broad no-auth exemptions",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T01:05:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1528140487cfa73b637f40653d9d4dbf4adf59d7",
"body": "The gRPC-Web proxy on :31008 accepted every origin: WithOriginFunc and\nWithWebsocketOriginFunc both returned true. The WebSocket path is a\nserver-side bypass (not just a missing CORS header) and, unlike the HTTP\npath, is not gated by a CORS preflight, so any site the user visited\n(or DNS rebinding) \n[…]\ness of\nContent-Type, so a cross-origin simple POST reaches the unauthenticated\n/v1/auth routes and can pop a pairing challenge. Reject browser-driven\ncross-origin requests there before any route runs.",
"is_bot": false,
"headline": "GO-7365 Restrict local HTTP surfaces to trusted origins",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T00:53:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "08e85574edee5097565629d20fc195c49083d54a",
"body": null,
"is_bot": false,
"headline": "GO-7323 Correct the client brief status: phase 1+2 are merged to develop",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T00:32:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c2c978dc0bc613a8ee86d877a4acdd486a5e688",
"body": "ListOrphans offered every live chat attachment to the user as a removable\norphan. A file uploaded into a chat gets createdInContext = the chat object and\ncreatedInContextRef = the message id, but it can never acquire a backlink: chat\nmessages live in anystore, chatobject contributes no outgoing link\n[…]\nts children whatever it used\nto be, including a deleted chat's attachments.\n\nqueryParentStates becomes queryParentInfo, returning state + layout from the\nQueryRaw batch it already ran. No extra query.",
"is_bot": false,
"headline": "GO-7323 Exclude chat content from ObjectCleanupSuggestions",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-10T00:31:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "380c93bd2e4b2c58556e6a5c9d9d0767adb4eb69",
"body": "…lient recv backoff\n\nPulls two client fixes from anyproto/zeroconf (branch client-robustness):\n- Browse/Lookup close the entries channel on every return path, so a\n consumer ranging over it cannot leak when socket setup fails\n- the client recv loop retries transient read errors with the same\n growing backoff as the server instead of dying on the first error\n\nClaude-Session: https://claude.ai/code/session_01LbpGK3gDEZnXpiySZgLJWN",
"is_bot": false,
"headline": "GO-7363 Bump zeroconf fork: close entries channel on setup failure, c…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T21:58:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c33aeaa0828988f9aa19866f396af331007d3243",
"body": "Newer Android NSD can report IPv6 addresses; %s:%d produced\nunparseable fe80::1:4006-style strings that failed at dial. Bracket\nthem via net.JoinHostPort and skip empty entries from the\ncomma-separated bridge value. Verified red/green on a scratch copy\n(GOOS=android file) and type-checked with the NDK.\n\nClaude-Session: https://claude.ai/code/session_01LbpGK3gDEZnXpiySZgLJWN",
"is_bot": false,
"headline": "GO-7363 Format Android-discovered IPv6 addresses with JoinHostPort",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T21:50:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61380aad2942e50c3563f8acbfb0cc0da8dd3ee6",
"body": "NetInterfaceWithAddrCache.GetAddr had a value receiver, so the result\nwas cached into a copy and thrown away: every call re-ran the\nunderlying getifaddrs syscalls (the doc comment on\nfilterMulticastInterfaces promised otherwise). The hot path —\nSortIPsLikeInterfaces -> findInterfacePosByIP, per disc\n[…]\n (range copies would cache into the loop\nvariable). Android's injected caches are unaffected: copies carry the\npopulated cache.\n\nClaude-Session: https://claude.ai/code/session_01LbpGK3gDEZnXpiySZgLJWN",
"is_bot": false,
"headline": "GO-7363 Make interface addr cache actually cache",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T21:48:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8adf3dfba2170bc1b8370f8e4cfb26ff25b132d1",
"body": "The networkState hook ran the full teardown + rebuild synchronously:\ngoodbye packets with 3s write deadlines per interface and the iOS\nself-connect probe (3s dial) all executed under networkMu, blocking the\nDeviceNetworkStateSet RPC for seconds on every wifi/cellular transition\nand stalling GetNetwo\n[…]\nted\nworker through a buffered channel (coalescing rapid transitions); the\nworker performs the refresh on the component context.\n\nClaude-Session: https://claude.ai/code/session_01LbpGK3gDEZnXpiySZgLJWN",
"is_bot": false,
"headline": "GO-7363 Run network-change mdns rebuild async off the RPC path",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T21:43:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "49e7f276f6bf0877354eeb5dbfadc226fa3e27dc",
"body": "refreshInterfaces writes l.interfacesAddrs from the periodic goroutine\nand the networkState hook while PeerDiscovered reads it via\ngetAddresses from a binder thread — all unsynchronized. Mirror the\ndesktop locking discipline (l.m) and serialize concurrent refreshes.\nAlso wrap the enumeration error and constrain the desktop test file to\n!android (it references desktop-only fields).\n\nClaude-Session: https://claude.ai/code/session_01LbpGK3gDEZnXpiySZgLJWN",
"is_bot": false,
"headline": "GO-7363 Guard Android interfacesAddrs with a mutex",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T21:40:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92f0e0d1891f8aea01266fcee2c9a7312a855d9a",
"body": "refreshInterfaces ignored the GetInterfacesAddrs error, treating a\ntransient enumeration failure as \"no interfaces\" and tearing the\nrunning server down. It also committed the new addr snapshot before\nstartServer, so a failed start was never retried while the addresses\nstayed unchanged — on desktop (\n[…]\n the enumeration error without touching the server; on a failed\nstart clear the committed snapshot so the next 5s tick retries.\n\nClaude-Session: https://claude.ai/code/session_01LbpGK3gDEZnXpiySZgLJWN",
"is_bot": false,
"headline": "GO-7363 Surface interface-enumeration errors and retry failed mdns start",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T21:39:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0cb8111afb6a97f89776f8ebc273a1fe58950c9b",
"body": "notifierProvider was created once per process with a single context;\ncomponent Close -> Remove() canceled it permanently, so every observer\ninstalled by a later Provide (next account) ran PeerDiscovered with a\ndead context and the space exchange failed instantly. Local discovery\nstayed broken until \n[…]\nOS=android (they exercise android-only types); verified\nred/green on a scratch copy of the logic and type-checked with the NDK.\n\nClaude-Session: https://claude.ai/code/session_01LbpGK3gDEZnXpiySZgLJWN",
"is_bot": false,
"headline": "GO-7363 Fix Android discovery dying after the first account switch",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T21:37:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "170e06dac9bf2b0e1abfbc837e46dc19c591933c",
"body": "- refreshInterfaces waited unboundedly on closeWait while holding\n refreshMu: one stuck query goroutine (e.g. an entries channel that is\n never closed) wedged every future refresh and, through the\n networkState hook, froze Set/GetNetworkState for the whole app and\n hung Close. Wait with a 5s cap\n[…]\nce list under l.m in startQuerying instead of\n letting browse read l.interfacesAddrs unlocked, racing with the next\n refresh.\n\nClaude-Session: https://claude.ai/code/session_01LbpGK3gDEZnXpiySZgLJWN",
"is_bot": false,
"headline": "GO-7363 Bound mdns teardown wait and fix query-generation races",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T21:31:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b8216f8bb1eca8f420db8dd4a196ccc14a169b5b",
"body": "…n-events\n\nGO-7323 Cleanup suggestions: user-confirmed archival, space-wide orphan list, ignore",
"is_bot": false,
"headline": "Merge pull request #3201 from anyproto/go-7323-cascade-deletion-orpha…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T16:17:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b285f7931a3fd70646f992fab1dd5cd3a2e9e491",
"body": "Prepare the brief to be handed to a client implementer. It still described the\npre-disable behavior in places the earlier edit missed, and lacked the message\nshapes needed to implement against.\n\n- Correct the status: the branch is unmerged and unpushed, not \"already shipped\".\n- Fix the stale objectI\n[…]\n- Add checklist steps for wiring both RPCs.\n- Replace the settled naming open-question with the blocking-vs-informative\n decision the client actually owns.\n- Remove a stray closing code fence at EOF.",
"is_bot": false,
"headline": "GO-7323 Make the client brief accurate and self-contained",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T14:03:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1110f502e2071fcbc46cfd8baa32e7f3067c6727",
"body": "The backend no longer archives, restores, or deletes anything on its own when a\ncontext is archived, deleted, or unlinked. Every orphan -- objects and files, at\nevery depth -- is reported as a CleanupSuggestion candidate, and the client\ndecides whether to prompt in place or let the user clean up lat\n[…]\ne creator check that fell back to archiving another\nparticipant's file is gone, since only admins can moderate a chat. That removes\nthe last caller of ParticipantProvider, so the component is unwired.",
"is_bot": false,
"headline": "GO-7323 Disable auto-archival and auto-restore of orphan files",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T14:00:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d197821e7a366df436c48839c722a6653043e9d6",
"body": "The backend stops mutating objects on context archive/delete/unlink; every\norphan is reported as a CleanupSuggestion candidate and the client decides\nwhether to prompt in place or let the user clean up later. Archival code is\nretained behind a compile-time switch pending user feedback.\n\nChat attachment deletion stays, and now deletes unconditionally.",
"is_bot": false,
"headline": "GO-7323 Add design spec for disabling auto-archival of orphan files",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T13:46:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70a45da7598a8bbaf9e07b735774d7d1213268b4",
"body": "Four independent Opus reviews (graph algorithm, store/query semantics,\nprotocol surface, state mutation) found no correctness bugs. Applying their\nactionable findings:\n\n- Wrap the bare error return from queryParentStates (CLAUDE.md convention).\n- Mark the ChangeType iota block APPEND ONLY: the value\n[…]\ntedInContext parent is an evicted candidate.\n- Drop resolvedLayout from defaultCleanupKeys (already a forced key).\n- Document why the restore paths deliberately do not honor\n createdInContextIgnored.",
"is_bot": false,
"headline": "GO-7323 Address multi-lens review of the cleanup-suggestion feature",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T13:11:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d8175859e151374de50f924aed1bc0547150c9cd",
"body": null,
"is_bot": false,
"headline": "GO-7323 Fix article agreement in comments after CleanupSuggestion rename",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T12:38:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e97bc56fdd1ecdd858f2c631377e219bdef2e60",
"body": "…e RPC handlers",
"is_bot": false,
"headline": "GO-7323 Add ObjectCleanupSuggestions and ObjectCleanupSuggestionIgnor…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T12:31:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7a2d6bd91b01e9ce16d548393853021f42ec080",
"body": "…reatedInContext",
"is_bot": false,
"headline": "GO-7323 Add detailservice.SetCreatedInContextIgnored with ChangeTypeC…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T12:30:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b3e6433449ca6aa560da789c297018ba0414918",
"body": "…e protos",
"is_bot": false,
"headline": "GO-7323 Add ObjectCleanupSuggestions and ObjectCleanupSuggestionIgnor…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T12:27:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26e9a3994e849068d2c7fdf85f6d1bad11cc0203",
"body": "…dates",
"is_bot": false,
"headline": "GO-7323 Exclude createdInContextIgnored objects from cascade GC candi…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T12:26:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d582738043e3765f118d829f6b67eb20d5c96ca",
"body": "Computes the removable set as the greatest subset of the createdInContext\ncandidates whose active backlinks all fall inside it — the cascade's eviction\nrule applied space-wide — then marks forest roots and their reasons.\n\nThree store queries (candidates, active-backlink batch, parent-state batch);\nt\n[…]\n\"is my parent a candidate\" against a snapshot of\nthe candidate set taken before the guard runs. Reading the map it deletes from\nwould make a child's fate depend on Go's randomized map iteration order.",
"is_bot": false,
"headline": "GO-7323 Add objectgc.ListOrphans computing the space orphan forest",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T12:25:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d10d9c3375e49ec93f3d413e98acb36d81e825ab",
"body": "…ontext",
"is_bot": false,
"headline": "GO-7323 Add createdInContextIgnored relation and ChangeTypeCreatedInC…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T12:19:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "490f764597e3bc465ec328fab890d1fdf74520d4",
"body": "Phase 1 is unmerged, so the protocol has never shipped. The popup event and\nthe new space-wide cleanup list are the same concept; unify the client-facing\nvocabulary on 'cleanup suggestion'. Internal Go keeps the precise term\n'orphan'. Field number 146 and the Trigger enum are unchanged.",
"is_bot": false,
"headline": "GO-7323 Rename OrphansDetected event to CleanupSuggestion",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T12:19:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dab7837d3ce74578f513928b341de07be237f291",
"body": "Protocol/client says 'cleanup suggestion'; internal Go keeps 'orphan'.\nRelation orphanIgnored -> createdInContextIgnored (clusters with\ncreatedInContext/createdInContextRef). ChangeType is now the generic\nChangeTypeCreatedInContext. RPCs are ObjectCleanupSuggestions and\nObjectCleanupSuggestionIgnore. Adds Task 0 renaming the unmerged phase-1\nOrphansDetected event to CleanupSuggestion.",
"is_bot": false,
"headline": "GO-7323 Rename to cleanup-suggestion vocabulary in spec and plan",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T12:12:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd5f086563b6cb4217cb40610dfacc19c06766d9",
"body": null,
"is_bot": false,
"headline": "GO-7323 Add implementation plan for space-wide orphan list and ignore",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T11:55:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c2a3d78b89c7b9f5243d818d64e1a8a230b4778",
"body": "Deletion tombstones the index row (id + isDeleted), so the backend can\ndistinguish an archived, deleted, or still-active parent authoritatively.\nFor roots these three cases are total: the parent is never in S, never\nabsent (sync-gap guard), and never active-and-still-linking. Replace the\nHasIds existence check with a parent-state batch that serves both the\nguard and the reason.",
"is_bot": false,
"headline": "GO-7323 Add per-root orphan reason to space orphan list spec",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T11:44:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef67eaea287a2c98e7570596e085c0122bfdbb34",
"body": "Second phase: an on-demand ObjectListOrphans RPC returning the orphan\nforest (roots + subtrees, objects and files) with caller-selected keys,\nplus an orphanIgnored relation and a thin ObjectListSetOrphanIgnored RPC\nthat uses a new ChangeTypeOrphanIgnored so the ignore syncs without\nbumping lastModifiedDate.",
"is_bot": false,
"headline": "GO-7323 Add design spec for space-wide orphan list and ignore",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T11:30:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "996b348c3cf8a7d861174c41b48d226af04ea39d",
"body": "…nto go-7323-cascade-deletion-orphan-events\n\n# Conflicts:\n#\tpb/commands.pb.go",
"is_bot": false,
"headline": "GO-7323 Merge branch 'develop' of github.com:anyproto/anytype-heart i…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-09T10:14:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f0ef06f92759112819f96c10fde90174552187e",
"body": "…ace-by-default\n\nGO-7362 debug: make DebugRunProfiler trace opt-in, drop account_select_trace",
"is_bot": false,
"headline": "Merge pull request #3199 from anyproto/go-7362-debugrunprofiler-no-tr…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-08T19:00:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19e0bad610603b345643b33a85e4e80ba302081e",
"body": "…UP_TRACE\n\nThe login flight recorder is started on every desktop AccountSelect and\ncontinuously captures a runtime execution trace, adding overhead to normal\nstartups. Gate it behind ANYTYPE_STARTUP_TRACE=1 so it is off by default and\nenabled only when explicitly debugging startup performance. When off,\nDebugAccountSelectTrace returns an error because nothing was recorded.",
"is_bot": false,
"headline": "GO-7362 debug: gate AccountSelect trace recorder behind ANYTYPE_START…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-08T18:59:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a98ea2cb10439cd68f597f50287ec484f5adcfc",
"body": "…-on-ios\n\nGO-7363 Fix mDNS recv syscall storm on iOS",
"is_bot": false,
"headline": "Merge pull request #3198 from anyproto/go-7363-fix-mdns-syscall-storm…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-08T18:59:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0146559b25ba851641949d28be984aa5ff0847ba",
"body": "…t_trace\n\nA timed DebugRunProfiler run now captures only CPU + heap(start/end) +\ngoroutines(start/end) by default. The runtime execution trace is the\nheaviest artifact in both archive size and runtime overhead, so it is now\nopt-in via a new includeTrace flag on RpcDebugRunProfilerRequest.\n\nThe in-fl\n[…]\nProfiler is split into a testable runTimedProfiler(profilesDir, ...)\ninner method so the capture logic can be exercised without the global\ninitialparams singleton; a new test asserts the trace gating.",
"is_bot": false,
"headline": "GO-7362 debug: make DebugRunProfiler trace opt-in, drop account_selec…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-08T18:54:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "60b140dea5e8cda020ad28ffecb6389c0b2d89db",
"body": "On iOS a Wi-Fi/cellular network transition can leave the mDNS multicast\nsocket in a persistent error state (ENOTCONN) without closing it or\ncalling Shutdown, so the zeroconf recv loop spun on recvmsg at ~1.6M\ncalls/s and pegged a CPU core. Confirmed on-device: ~34M syscalls over\n~3 minutes per episo\n[…]\nry transition; release\n l.m across the teardown (mirrors Close), serialized by refreshMu.\n- Add a test pinning that a same-value SetNetworkState is a no-op, so it\n cannot trigger a needless rebuild.",
"is_bot": false,
"headline": "GO-7363 Fix mDNS recv syscall storm on iOS",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-08T18:54:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "617f47b10ac235386eefee2554fd3c42bc5adfd3",
"body": "…tered-spaces\n\nGO-7361 p2pstatus: only broadcast status for registered spaces",
"is_bot": false,
"headline": "Merge pull request #3197 from anyproto/go-7361-p2pstatus-filter-regis…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-08T17:39:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cab6c25a2444f0a78e069b43acc0f31e7a67b80a",
"body": "p2pStatus is a cosmetic per-space connection indicator. Its spaceIds map\nwas fed from two paths through the shared refresh channel: RegisterSpace\n(the account's own loaded spaces) and the peerStore observer. Peers\ndiscovered on the local network via mDNS advertise all of their own\nspaceIds, which fl\n[…]\nsh arriving after\nUnregisterSpace re-created and re-broadcast the deleted space.\n\nPurely cosmetic: peerStore population and sync peer selection are\nuntouched, so cold sync from a p2p node still works.",
"is_bot": false,
"headline": "GO-7361 p2pstatus: only broadcast status for registered spaces",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-08T17:10:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ebdc94058871b817f70c3f7f1a7e4c4f75478952",
"body": "…-cached\n\nGO-7358 Make FileCacheDownload cheap when file already cached",
"is_bot": false,
"headline": "Merge pull request #3196 from anyproto/go-7358-filecachedownload-skip…",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-07T23:00:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f47315360ad4d6afe7a4e18b4d11c5821b2cc85b",
"body": "The FileCacheDownload RPC is called very frequently by iOS (per chat\nmessage/file), so it must be cheap when the file is already local.\n\n- filedownloader.CacheFile now skips the warm-up when the file's root\n block already exists in the local flatfs (commonFile.HasCid — a pure\n local key-existence \n[…]\n skippedFiles,\n enqueuedFiles, warmedUpFiles, cancelledBeforeStart. Also fix a context\n leak in cacheWarmer.enqueue on shutdown.\n\nTests cover the skip/warm decision and cancel-before-start counting.",
"is_bot": false,
"headline": "GO-7358 Make FileCacheDownload cheap when file already cached",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-07T22:58:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "188f6fd52a2a5cecf2903f071fc4a07e9cccc20b",
"body": "GO-7356 Replay-scoped parent index for tree building + concurrent-replace safety fixes",
"is_bot": false,
"headline": "Merge pull request #3194 from anyproto/go-7356-replay-parent-index",
"author_name": "Roman Khafizianov",
"author_login": "requilence",
"committed_at": "2026-07-07T14:09:53Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 2316,
"latest_release_at": "2026-07-18T00:14:00Z",
"latest_release_tag": "v0.50.17",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 52,
"days_since_latest_release": 4,
"mean_days_between_releases": 1.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 87,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/anyproto/anytype-heart",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/anyproto/anytype-heart",
"is_deprecated": false,
"latest_version": "v0.50.17",
"repository_url": "https://github.com/anyproto/anytype-heart",
"versions_count": 619,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-17T23:05:35Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 113,
"stars": 405,
"watchers": 5,
"fork_history": {
"days": [
{
"date": "2023-07-18",
"count": 1
},
{
"date": "2023-07-19",
"count": 1
},
{
"date": "2023-07-20",
"count": 1
},
{
"date": "2023-07-26",
"count": 1
},
{
"date": "2023-07-27",
"count": 1
},
{
"date": "2023-07-30",
"count": 1
},
{
"date": "2023-08-04",
"count": 1
},
{
"date": "2023-08-05",
"count": 1
},
{
"date": "2023-08-20",
"count": 1
},
{
"date": "2023-09-10",
"count": 1
},
{
"date": "2023-09-15",
"count": 1
},
{
"date": "2023-09-18",
"count": 1
},
{
"date": "2023-09-24",
"count": 1
},
{
"date": "2023-10-02",
"count": 1
},
{
"date": "2023-10-04",
"count": 1
},
{
"date": "2023-10-26",
"count": 1
},
{
"date": "2023-11-01",
"count": 1
},
{
"date": "2023-12-12",
"count": 1
},
{
"date": "2023-12-22",
"count": 1
},
{
"date": "2024-01-05",
"count": 1
},
{
"date": "2024-01-13",
"count": 1
},
{
"date": "2024-01-18",
"count": 1
},
{
"date": "2024-02-25",
"count": 1
},
{
"date": "2024-03-01",
"count": 1
},
{
"date": "2024-03-07",
"count": 1
},
{
"date": "2024-03-11",
"count": 1
},
{
"date": "2024-03-27",
"count": 1
},
{
"date": "2024-04-05",
"count": 1
},
{
"date": "2024-04-18",
"count": 1
},
{
"date": "2024-05-12",
"count": 1
},
{
"date": "2024-06-13",
"count": 1
},
{
"date": "2024-07-03",
"count": 1
},
{
"date": "2024-07-20",
"count": 1
},
{
"date": "2024-08-04",
"count": 1
},
{
"date": "2024-08-12",
"count": 1
},
{
"date": "2024-08-29",
"count": 1
},
{
"date": "2024-09-03",
"count": 1
},
{
"date": "2024-09-12",
"count": 1
},
{
"date": "2024-11-08",
"count": 1
},
{
"date": "2024-12-04",
"count": 1
},
{
"date": "2024-12-11",
"count": 1
},
{
"date": "2024-12-31",
"count": 1
},
{
"date": "2025-01-01",
"count": 1
},
{
"date": "2025-01-04",
"count": 1
},
{
"date": "2025-01-06",
"count": 1
},
{
"date": "2025-01-11",
"count": 2
},
{
"date": "2025-02-14",
"count": 1
},
{
"date": "2025-02-19",
"count": 1
},
{
"date": "2025-03-01",
"count": 1
},
{
"date": "2025-03-05",
"count": 1
},
{
"date": "2025-03-18",
"count": 2
},
{
"date": "2025-03-27",
"count": 1
},
{
"date": "2025-03-29",
"count": 1
},
{
"date": "2025-04-10",
"count": 1
},
{
"date": "2025-04-12",
"count": 1
},
{
"date": "2025-04-29",
"count": 1
},
{
"date": "2025-05-03",
"count": 1
},
{
"date": "2025-05-09",
"count": 1
},
{
"date": "2025-05-12",
"count": 1
},
{
"date": "2025-05-14",
"count": 1
},
{
"date": "2025-05-19",
"count": 1
},
{
"date": "2025-05-29",
"count": 1
},
{
"date": "2025-06-08",
"count": 1
},
{
"date": "2025-07-15",
"count": 1
},
{
"date": "2025-07-24",
"count": 1
},
{
"date": "2025-07-31",
"count": 1
},
{
"date": "2025-08-01",
"count": 1
},
{
"date": "2025-08-03",
"count": 1
},
{
"date": "2025-08-16",
"count": 1
},
{
"date": "2025-08-17",
"count": 1
},
{
"date": "2025-08-20",
"count": 1
},
{
"date": "2025-09-15",
"count": 1
},
{
"date": "2025-09-20",
"count": 1
},
{
"date": "2025-10-28",
"count": 1
},
{
"date": "2025-11-04",
"count": 1
},
{
"date": "2025-11-06",
"count": 1
},
{
"date": "2025-11-12",
"count": 1
},
{
"date": "2025-11-24",
"count": 1
},
{
"date": "2025-11-27",
"count": 1
},
{
"date": "2025-12-04",
"count": 1
},
{
"date": "2025-12-30",
"count": 1
},
{
"date": "2026-01-05",
"count": 1
},
{
"date": "2026-01-09",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-01-24",
"count": 1
},
{
"date": "2026-01-31",
"count": 1
},
{
"date": "2026-02-08",
"count": 1
},
{
"date": "2026-02-09",
"count": 1
},
{
"date": "2026-02-22",
"count": 1
},
{
"date": "2026-02-23",
"count": 1
},
{
"date": "2026-02-27",
"count": 1
},
{
"date": "2026-02-28",
"count": 1
},
{
"date": "2026-03-09",
"count": 1
},
{
"date": "2026-03-10",
"count": 2
},
{
"date": "2026-03-18",
"count": 1
},
{
"date": "2026-03-23",
"count": 1
},
{
"date": "2026-03-24",
"count": 1
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-03-31",
"count": 1
},
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-04-24",
"count": 1
},
{
"date": "2026-04-27",
"count": 1
},
{
"date": "2026-06-19",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-08",
"count": 1
},
{
"date": "2026-07-14",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": true,
"collected": 112,
"total_forks": 113
},
"star_history": null,
"open_issues_and_prs": 92
},
"ai_readiness": {
"has_nix": true,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [
"core/api/docs/openapi.json",
"core/api/docs/openapi.yaml",
"pb/protos/changes.proto",
"pb/protos/commands.proto",
"pb/protos/events.proto",
"pb/protos/service/service.proto",
"pb/protos/snapshot.proto",
"pkg/lib/pb/model/protos/localstore.proto",
"pkg/lib/pb/model/protos/models.proto",
"pkg/lib/pb/storage/protos/file.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"build.gradle",
"go.mod"
],
"largest_source_bytes": 8134782,
"source_files_sampled": 1492,
"oversized_source_files": 21,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"core/api/CLAUDE.md",
"core/block/AGENTS.md",
"core/block/import/AGENTS.md"
],
"agent_instruction_max_bytes": 7930
},
"dependencies": {
"manifests": [
"build.gradle",
"go.mod",
"package.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "google.golang.org/grpc",
"direct": true,
"version": "v1.81.1",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-hrxh-6v49-42gf"
],
"fixed_version": "1.82.1",
"advisory_count": 1,
"oldest_advisory_days": 0
},
{
"name": "github.com/ethereum/go-ethereum",
"direct": true,
"version": "v1.13.15",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-2gjw-fg97-vg3r",
"GHSA-689v-6xwf-5jf3",
"GHSA-m6j8-rg6r-7mv8",
"GHSA-mq3p-rrmp-79jg",
"GHSA-mr7q-c9w9-wh4h",
"GO-2026-4314",
"GO-2026-4315",
"GO-2026-4507",
"GO-2026-4508",
"GO-2026-4511"
],
"fixed_version": "1.17.0",
"advisory_count": 10,
"oldest_advisory_days": 189
},
{
"name": "github.com/golang-jwt/jwt",
"direct": true,
"version": "v3.2.2+incompatible",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-mh63-6h87-95cp",
"GO-2025-3553"
],
"fixed_version": "5.2.2",
"advisory_count": 2,
"oldest_advisory_days": 487
},
{
"name": "golang.org/x/image",
"direct": true,
"version": "v0.27.0",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-44p7-9xx4-hf2g",
"GHSA-q675-qj96-32m9",
"GO-2026-4815",
"GO-2026-4961",
"GO-2026-4962",
"GO-2026-5031",
"GO-2026-5032",
"GO-2026-5061",
"GO-2026-5062",
"GO-2026-5066"
],
"fixed_version": "0.43.0",
"advisory_count": 10,
"oldest_advisory_days": 119
},
{
"name": "github.com/go-chi/chi/v5",
"direct": true,
"version": "v5.2.1",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GHSA-vrw8-fxc6-2r93",
"GO-2025-3770"
],
"fixed_version": "5.2.2",
"advisory_count": 2,
"oldest_advisory_days": 397
},
{
"name": "github.com/disintegration/imaging",
"direct": false,
"version": "v1.6.2",
"severity": "low",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GHSA-q7pp-wcgr-pffx"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 1051
},
{
"name": "github.com/yuin/goldmark",
"direct": true,
"version": "v1.7.8",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5320"
],
"fixed_version": "1.7.17",
"advisory_count": 1,
"oldest_advisory_days": 15
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 14
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"low": 1,
"high": 3,
"unknown": 2,
"critical": 1,
"moderate": 1
},
"advisory_count": 28,
"affected_count": 8,
"assessed_count": 280,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 2,
"direct_affected_count": 6
},
"ecosystems": [
"go",
"maven",
"npm"
],
"dependencies": [
{
"name": "github.com/JohannesKaufmann/html-to-markdown",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/PuerkitoBio/goquery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.2"
},
{
"name": "github.com/ahmetb/govvv",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
},
{
"name": "github.com/anyproto/any-store",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.7"
},
{
"name": "github.com/anyproto/any-sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.12.16"
},
{
"name": "github.com/anyproto/anytype-publish-server/publishclient",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20250716122732-cdcfe3a126bb"
},
{
"name": "github.com/anyproto/anytype-push-server/pushclient",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20250801122506-553f6c085a23"
},
{
"name": "github.com/anyproto/go-chash",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.0"
},
{
"name": "github.com/anyproto/go-naturaldate/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.2-0.20230524105841-9829cfd13438"
},
{
"name": "github.com/anyproto/go-slip10",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.1"
},
{
"name": "github.com/anyproto/goheif",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260216083627-c3efd00cd92e"
},
{
"name": "github.com/anyproto/lexid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.6"
},
{
"name": "github.com/anyproto/tantivy-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.6"
},
{
"name": "github.com/araddon/dateparse",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20210429162001-6b43995a97de"
},
{
"name": "github.com/avast/retry-go/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.6.1"
},
{
"name": "github.com/awalterschulze/goderive",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.1"
},
{
"name": "github.com/chai2010/webp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/cheggaaa/mb/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.3"
},
{
"name": "github.com/dave/jennifer",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.1"
},
{
"name": "github.com/davecgh/go-spew",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.2-0.20180830191138-d8f796af33cc"
},
{
"name": "github.com/dgraph-io/badger/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.2.0"
},
{
"name": "github.com/dhowden/tag",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20240417053706-3d75831295e8"
},
{
"name": "github.com/didip/tollbooth/v8",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v8.0.1"
},
{
"name": "github.com/dsoprea/go-exif/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "github.com/dsoprea/go-jpeg-image-structure/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.0-20221012074422-4f3f7e934102"
},
{
"name": "github.com/ethereum/go-ethereum",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.13.15"
},
{
"name": "github.com/gabriel-vasile/mimetype",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.13"
},
{
"name": "github.com/gin-gonic/gin",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.0"
},
{
"name": "github.com/globalsign/mgo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20181015135952-eeefdecb41b8"
},
{
"name": "github.com/go-chi/chi/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.2.1"
},
{
"name": "github.com/go-shiori/go-readability",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20241012063810-92284fa8a71f"
},
{
"name": "github.com/goccy/go-graphviz",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.10"
},
{
"name": "github.com/gofrs/flock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.12.1"
},
{
"name": "github.com/gogo/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.2"
},
{
"name": "github.com/gogo/status",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/golang-jwt/jwt",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.2.2+incompatible"
},
{
"name": "github.com/golang/snappy",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/gosimple/slug",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.15.0"
},
{
"name": "github.com/gosimple/unidecode",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.1"
},
{
"name": "github.com/grokify/html-strip-tags-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.0"
},
{
"name": "github.com/grpc-ecosystem/go-grpc-middleware",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/grpc-ecosystem/go-grpc-prometheus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/grpc-ecosystem/grpc-opentracing",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20180507213350-8e809c8a8645"
},
{
"name": "github.com/hashicorp/go-multierror",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1"
},
{
"name": "github.com/hashicorp/golang-lru/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.7"
},
{
"name": "github.com/hashicorp/yamux",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.2"
},
{
"name": "github.com/hbagdi/go-unsplash",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20230414214043-474fc02c9119"
},
{
"name": "github.com/huandu/skiplist",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.1"
},
{
"name": "github.com/iancoleman/strcase",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
},
{
"name": "github.com/improbable-eng/grpc-web",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.15.0"
},
{
"name": "github.com/ipfs/boxo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.41.0"
},
{
"name": "github.com/ipfs/go-block-format",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.4"
},
{
"name": "github.com/ipfs/go-cid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.2"
},
{
"name": "github.com/ipfs/go-datastore",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1"
},
{
"name": "github.com/ipfs/go-ds-flatfs",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.5"
},
{
"name": "github.com/ipfs/go-ipld-format",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.4"
},
{
"name": "github.com/ipfs/go-log",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.5"
},
{
"name": "github.com/joho/godotenv",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.1"
},
{
"name": "github.com/jsummers/gobmp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20230614200233-a9de23ed2e25"
},
{
"name": "github.com/kelseyhightower/envconfig",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.0"
},
{
"name": "github.com/klauspost/compress",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.18.0"
},
{
"name": "github.com/kovidgoyal/imaging",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.4"
},
{
"name": "github.com/libp2p/zeroconf/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.2.0"
},
{
"name": "github.com/logrusorgru/aurora",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.3+incompatible"
},
{
"name": "github.com/magiconair/properties",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.9"
},
{
"name": "github.com/matishsiao/goInfo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20240924010139-10388a85396f"
},
{
"name": "github.com/mattn/go-sqlite3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.14.22"
},
{
"name": "github.com/mb0/diff",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20131118162322-d8d9a906c24d"
},
{
"name": "github.com/microcosm-cc/bluemonday",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.27"
},
{
"name": "github.com/miolini/datacounter",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.3"
},
{
"name": "github.com/mr-tron/base58",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "github.com/multiformats/go-base32",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.0"
},
{
"name": "github.com/multiformats/go-multiaddr-dns",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.0"
},
{
"name": "github.com/multiformats/go-multibase",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
},
{
"name": "github.com/multiformats/go-multihash",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.3"
},
{
"name": "github.com/oov/psd",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20220121172623-5db5eafcecbb"
},
{
"name": "github.com/opentracing/opentracing-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/otiai10/copy",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.14.1"
},
{
"name": "github.com/otiai10/opengraph/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.0"
},
{
"name": "github.com/pkg/errors",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.1"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.23.2"
},
{
"name": "github.com/pseudomuto/protoc-gen-doc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.1"
},
{
"name": "github.com/rwcarlsen/goexif",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20190401172101-9e8deecbddbd"
},
{
"name": "github.com/samber/lo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.49.1"
},
{
"name": "github.com/sasha-s/go-deadlock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.5"
},
{
"name": "github.com/shirou/gopsutil/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.26.2"
},
{
"name": "github.com/srwiley/oksvg",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20221011165216-be6e8873101c"
},
{
"name": "github.com/srwiley/rasterx",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20220730225603-2ab79fcdd4ef"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/swaggo/swag/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.0-rc4"
},
{
"name": "github.com/uber/jaeger-client-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.30.0+incompatible"
},
{
"name": "github.com/valyala/fastjson",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.10"
},
{
"name": "github.com/vektra/mockery/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.53.6"
},
{
"name": "github.com/xeipuuv/gojsonschema",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.0"
},
{
"name": "github.com/yuin/goldmark",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.7.8"
},
{
"name": "github.com/zeebo/blake3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.4"
},
{
"name": "go.abhg.dev/goldmark/wikilink",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.0"
},
{
"name": "go.uber.org/atomic",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.0"
},
{
"name": "go.uber.org/mock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.0"
},
{
"name": "go.uber.org/zap",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.28.0"
},
{
"name": "golang.org/x/exp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260603202125-055de637280b"
},
{
"name": "golang.org/x/image",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.27.0"
},
{
"name": "golang.org/x/mobile",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20250218173827-cd096645fcd3"
},
{
"name": "golang.org/x/net",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.57.0"
},
{
"name": "golang.org/x/oauth2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.36.0"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.47.0"
},
{
"name": "golang.org/x/text",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.40.0"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.81.1"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.36.11"
},
{
"name": "gopkg.in/natefinch/lumberjack.v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.2.1"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
},
{
"name": "storj.io/drpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.0"
},
{
"name": "zombiezen.com/go/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.4.2"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/ahmetb/govvv",
"direct": true,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/any-store",
"direct": true,
"version": "v0.4.7",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/any-sync",
"direct": true,
"version": "v0.12.16",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/anytype-publish-server/publishclient",
"direct": true,
"version": "v0.0.0-20250716122732-cdcfe3a126bb",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/anytype-push-server/pushclient",
"direct": true,
"version": "v0.0.0-20250801122506-553f6c085a23",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/go-chash",
"direct": true,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/go-naturaldate/v2",
"direct": true,
"version": "v2.0.2-0.20230524105841-9829cfd13438",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/go-slip10",
"direct": true,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/goheif",
"direct": true,
"version": "v0.0.0-20260216083627-c3efd00cd92e",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/lexid",
"direct": true,
"version": "v0.0.6",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/tantivy-go",
"direct": true,
"version": "v1.0.6",
"ecosystem": "go"
},
{
"name": "github.com/avast/retry-go/v4",
"direct": true,
"version": "v4.6.1",
"ecosystem": "go"
},
{
"name": "github.com/awalterschulze/goderive",
"direct": true,
"version": "v0.5.1",
"ecosystem": "go"
},
{
"name": "github.com/chai2010/webp",
"direct": true,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/cheggaaa/mb/v3",
"direct": true,
"version": "v3.0.3",
"ecosystem": "go"
},
{
"name": "github.com/dave/jennifer",
"direct": true,
"version": "v1.7.1",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": true,
"version": "v1.1.2-0.20180830191138-d8f796af33cc",
"ecosystem": "go"
},
{
"name": "github.com/dhowden/tag",
"direct": true,
"version": "v0.0.0-20240417053706-3d75831295e8",
"ecosystem": "go"
},
{
"name": "github.com/didip/tollbooth/v8",
"direct": true,
"version": "v8.0.1",
"ecosystem": "go"
},
{
"name": "github.com/dsoprea/go-exif/v3",
"direct": true,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "github.com/ethereum/go-ethereum",
"direct": true,
"version": "v1.13.15",
"ecosystem": "go"
},
{
"name": "github.com/gabriel-vasile/mimetype",
"direct": true,
"version": "v1.4.13",
"ecosystem": "go"
},
{
"name": "github.com/gin-gonic/gin",
"direct": true,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/globalsign/mgo",
"direct": true,
"version": "v0.0.0-20181015135952-eeefdecb41b8",
"ecosystem": "go"
},
{
"name": "github.com/go-chi/chi/v5",
"direct": true,
"version": "v5.2.1",
"ecosystem": "go"
},
{
"name": "github.com/go-shiori/go-readability",
"direct": true,
"version": "v0.0.0-20241012063810-92284fa8a71f",
"ecosystem": "go"
},
{
"name": "github.com/goccy/go-graphviz",
"direct": true,
"version": "v0.2.10",
"ecosystem": "go"
},
{
"name": "github.com/gofrs/flock",
"direct": true,
"version": "v0.12.1",
"ecosystem": "go"
},
{
"name": "github.com/gogo/status",
"direct": true,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/golang-jwt/jwt",
"direct": true,
"version": "v3.2.2+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/golang/snappy",
"direct": true,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/gosimple/slug",
"direct": true,
"version": "v1.15.0",
"ecosystem": "go"
},
{
"name": "github.com/gosimple/unidecode",
"direct": true,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/grokify/html-strip-tags-go",
"direct": true,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/go-grpc-middleware",
"direct": true,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/go-grpc-prometheus",
"direct": true,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/grpc-opentracing",
"direct": true,
"version": "v0.0.0-20180507213350-8e809c8a8645",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/go-multierror",
"direct": true,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/golang-lru/v2",
"direct": true,
"version": "v2.0.7",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/yamux",
"direct": true,
"version": "v0.1.2",
"ecosystem": "go"
},
{
"name": "github.com/hbagdi/go-unsplash",
"direct": true,
"version": "v0.0.0-20230414214043-474fc02c9119",
"ecosystem": "go"
},
{
"name": "github.com/huandu/skiplist",
"direct": true,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/iancoleman/strcase",
"direct": true,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/improbable-eng/grpc-web",
"direct": true,
"version": "v0.15.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/boxo",
"direct": true,
"version": "v0.41.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-block-format",
"direct": true,
"version": "v0.2.4",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-cid",
"direct": true,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-datastore",
"direct": true,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-ipld-format",
"direct": true,
"version": "v0.6.4",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-log",
"direct": true,
"version": "v1.0.5",
"ecosystem": "go"
},
{
"name": "github.com/joho/godotenv",
"direct": true,
"version": "v1.5.1",
"ecosystem": "go"
},
{
"name": "github.com/jsummers/gobmp",
"direct": true,
"version": "v0.0.0-20230614200233-a9de23ed2e25",
"ecosystem": "go"
},
{
"name": "github.com/kelseyhightower/envconfig",
"direct": true,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": true,
"version": "v1.18.0",
"ecosystem": "go"
},
{
"name": "github.com/kovidgoyal/imaging",
"direct": true,
"version": "v1.6.4",
"ecosystem": "go"
},
{
"name": "github.com/logrusorgru/aurora",
"direct": true,
"version": "v2.0.3+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/magiconair/properties",
"direct": true,
"version": "v1.8.9",
"ecosystem": "go"
},
{
"name": "github.com/matishsiao/goinfo",
"direct": true,
"version": "v0.0.0-20240924010139-10388a85396f",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-sqlite3",
"direct": true,
"version": "v1.14.22",
"ecosystem": "go"
},
{
"name": "github.com/mb0/diff",
"direct": true,
"version": "v0.0.0-20131118162322-d8d9a906c24d",
"ecosystem": "go"
},
{
"name": "github.com/microcosm-cc/bluemonday",
"direct": true,
"version": "v1.0.27",
"ecosystem": "go"
},
{
"name": "github.com/miolini/datacounter",
"direct": true,
"version": "v1.0.3",
"ecosystem": "go"
},
{
"name": "github.com/mr-tron/base58",
"direct": true,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-base32",
"direct": true,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multiaddr-dns",
"direct": true,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multibase",
"direct": true,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multihash",
"direct": true,
"version": "v0.2.3",
"ecosystem": "go"
},
{
"name": "github.com/oov/psd",
"direct": true,
"version": "v0.0.0-20220121172623-5db5eafcecbb",
"ecosystem": "go"
},
{
"name": "github.com/opentracing/opentracing-go",
"direct": true,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/otiai10/copy",
"direct": true,
"version": "v1.14.1",
"ecosystem": "go"
},
{
"name": "github.com/otiai10/opengraph/v2",
"direct": true,
"version": "v2.1.0",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": true,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": true,
"version": "v1.23.2",
"ecosystem": "go"
},
{
"name": "github.com/pseudomuto/protoc-gen-doc",
"direct": true,
"version": "v1.5.1",
"ecosystem": "go"
},
{
"name": "github.com/puerkitobio/goquery",
"direct": true,
"version": "v1.10.2",
"ecosystem": "go"
},
{
"name": "github.com/rwcarlsen/goexif",
"direct": true,
"version": "v0.0.0-20190401172101-9e8deecbddbd",
"ecosystem": "go"
},
{
"name": "github.com/samber/lo",
"direct": true,
"version": "v1.49.1",
"ecosystem": "go"
},
{
"name": "github.com/sasha-s/go-deadlock",
"direct": true,
"version": "v0.3.5",
"ecosystem": "go"
},
{
"name": "github.com/shirou/gopsutil/v4",
"direct": true,
"version": "v4.26.2",
"ecosystem": "go"
},
{
"name": "github.com/srwiley/oksvg",
"direct": true,
"version": "v0.0.0-20221011165216-be6e8873101c",
"ecosystem": "go"
},
{
"name": "github.com/srwiley/rasterx",
"direct": true,
"version": "v0.0.0-20220730225603-2ab79fcdd4ef",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "github.com/swaggo/swag/v2",
"direct": true,
"version": "v2.0.0-rc4",
"ecosystem": "go"
},
{
"name": "github.com/uber/jaeger-client-go",
"direct": true,
"version": "v2.30.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/valyala/fastjson",
"direct": true,
"version": "v1.6.10",
"ecosystem": "go"
},
{
"name": "github.com/vektra/mockery/v2",
"direct": true,
"version": "v2.53.6",
"ecosystem": "go"
},
{
"name": "github.com/xeipuuv/gojsonschema",
"direct": true,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/yuin/goldmark",
"direct": true,
"version": "v1.7.8",
"ecosystem": "go"
},
{
"name": "github.com/zeebo/blake3",
"direct": true,
"version": "v0.2.4",
"ecosystem": "go"
},
{
"name": "go.abhg.dev/goldmark/wikilink",
"direct": true,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/atomic",
"direct": true,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/mock",
"direct": true,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": true,
"version": "v1.28.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": true,
"version": "v0.0.0-20260603202125-055de637280b",
"ecosystem": "go"
},
{
"name": "golang.org/x/image",
"direct": true,
"version": "v0.27.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/mobile",
"direct": true,
"version": "v0.0.0-20250218173827-cd096645fcd3",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": true,
"version": "v0.57.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": true,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": true,
"version": "v0.22.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": true,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": true,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": true,
"version": "v1.81.1",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": true,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/natefinch/lumberjack.v2",
"direct": true,
"version": "v2.2.1",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": true,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "storj.io/drpc",
"direct": true,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "zombiezen.com/go/sqlite",
"direct": true,
"version": "v1.4.2",
"ecosystem": "go"
},
{
"name": "filippo.io/edwards25519",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/alecthomas/units",
"direct": false,
"version": "v0.0.0-20240927000941-0f3dac36c52b",
"ecosystem": "go"
},
{
"name": "github.com/alexbrainman/goissue34681",
"direct": false,
"version": "v0.0.0-20191006012335-3fc7a47baff5",
"ecosystem": "go"
},
{
"name": "github.com/andybalholm/cascadia",
"direct": false,
"version": "v1.3.3",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/go-bip39",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/go-slip21",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/anyproto/go-sqlite",
"direct": false,
"version": "v1.4.2-any",
"ecosystem": "go"
},
{
"name": "github.com/aymerick/douceur",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/btcsuite/btcd/btcec/v2",
"direct": false,
"version": "v2.3.5",
"ecosystem": "go"
},
{
"name": "github.com/btcsuite/btcd/chaincfg/chainhash",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/sonic",
"direct": false,
"version": "v1.12.3",
"ecosystem": "go"
},
{
"name": "github.com/bytedance/sonic/loader",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v4",
"direct": false,
"version": "v4.3.0",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/chigopher/pathlib",
"direct": false,
"version": "v0.19.1",
"ecosystem": "go"
},
{
"name": "github.com/cloudwego/base64x",
"direct": false,
"version": "v0.1.4",
"ecosystem": "go"
},
{
"name": "github.com/cloudwego/iasm",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/crackcomm/go-gitignore",
"direct": false,
"version": "v0.0.0-20241020182519-7843d2ba8fdf",
"ecosystem": "go"
},
{
"name": "github.com/davidlazar/go-crypto",
"direct": false,
"version": "v0.0.0-20200604182044-b73af7476f6c",
"ecosystem": "go"
},
{
"name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
"direct": false,
"version": "v4.4.1",
"ecosystem": "go"
},
{
"name": "github.com/desertbit/timer",
"direct": false,
"version": "v0.0.0-20180107155436-c41aec40b27f",
"ecosystem": "go"
},
{
"name": "github.com/disintegration/imaging",
"direct": false,
"version": "v1.6.2",
"ecosystem": "go"
},
{
"name": "github.com/dsoprea/go-iptc",
"direct": false,
"version": "v0.0.0-20200609062250-162ae6b44feb",
"ecosystem": "go"
},
{
"name": "github.com/dsoprea/go-logging",
"direct": false,
"version": "v0.0.0-20200710184922-b02d349568dd",
"ecosystem": "go"
},
{
"name": "github.com/dsoprea/go-photoshop-info-format",
"direct": false,
"version": "v0.0.0-20200609050348-3db9b63b202c",
"ecosystem": "go"
},
{
"name": "github.com/dsoprea/go-utility/v2",
"direct": false,
"version": "v2.0.0-20221003172846-a3e1774ef349",
"ecosystem": "go"
},
{
"name": "github.com/dunglas/httpsfv",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/dustin/go-humanize",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/ebitengine/purego",
"direct": false,
"version": "v0.10.0",
"ecosystem": "go"
},
{
"name": "github.com/envoyproxy/protoc-gen-validate",
"direct": false,
"version": "v1.3.3",
"ecosystem": "go"
},
{
"name": "github.com/flopp/go-findfont",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/fogleman/gg",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/fsnotify/fsnotify",
"direct": false,
"version": "v1.9.0",
"ecosystem": "go"
},
{
"name": "github.com/gammazero/chanqueue",
"direct": false,
"version": "v1.1.2",
"ecosystem": "go"
},
{
"name": "github.com/gammazero/deque",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/gin-contrib/sse",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/go-errors/errors",
"direct": false,
"version": "v1.4.2",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/go-ole/go-ole",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonpointer",
"direct": false,
"version": "v0.19.6",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/jsonreference",
"direct": false,
"version": "v0.20.2",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/spec",
"direct": false,
"version": "v0.20.9",
"ecosystem": "go"
},
{
"name": "github.com/go-openapi/swag",
"direct": false,
"version": "v0.22.3",
"ecosystem": "go"
},
{
"name": "github.com/go-pkgz/expirable-cache/v3",
"direct": false,
"version": "v3.0.0",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/locales",
"direct": false,
"version": "v0.14.1",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/universal-translator",
"direct": false,
"version": "v0.18.1",
"ecosystem": "go"
},
{
"name": "github.com/go-playground/validator/v10",
"direct": false,
"version": "v10.22.1",
"ecosystem": "go"
},
{
"name": "github.com/go-shiori/dom",
"direct": false,
"version": "v0.0.0-20230515143342-73569d674e1c",
"ecosystem": "go"
},
{
"name": "github.com/go-viper/mapstructure/v2",
"direct": false,
"version": "v2.5.0",
"ecosystem": "go"
},
{
"name": "github.com/go-xmlfmt/xmlfmt",
"direct": false,
"version": "v0.0.0-20191208150333-d5b6f63a941b",
"ecosystem": "go"
},
{
"name": "github.com/gobwas/glob",
"direct": false,
"version": "v0.2.3",
"ecosystem": "go"
},
{
"name": "github.com/goccy/go-json",
"direct": false,
"version": "v0.10.3",
"ecosystem": "go"
},
{
"name": "github.com/gogo/googleapis",
"direct": false,
"version": "v1.3.1",
"ecosystem": "go"
},
{
"name": "github.com/gogs/chardet",
"direct": false,
"version": "v0.0.0-20211120154057-b7413eaefb8f",
"ecosystem": "go"
},
{
"name": "github.com/golang/freetype",
"direct": false,
"version": "v0.0.0-20170609003504-e2365dfdc4a0",
"ecosystem": "go"
},
{
"name": "github.com/golang/geo",
"direct": false,
"version": "v0.0.0-20210211234256-740aa86cb551",
"ecosystem": "go"
},
{
"name": "github.com/golang/glog",
"direct": false,
"version": "v1.2.5",
"ecosystem": "go"
},
{
"name": "github.com/golang/groupcache",
"direct": false,
"version": "v0.0.0-20210331224755-41bb18bfe9da",
"ecosystem": "go"
},
{
"name": "github.com/golang/protobuf",
"direct": false,
"version": "v1.5.4",
"ecosystem": "go"
},
{
"name": "github.com/google/flatbuffers",
"direct": false,
"version": "v1.12.1",
"ecosystem": "go"
},
{
"name": "github.com/google/go-querystring",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/gopherjs/gopherjs",
"direct": false,
"version": "v1.17.2",
"ecosystem": "go"
},
{
"name": "github.com/gorilla/css",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/errwrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/hdrhistogram/hdrhistogram-go",
"direct": false,
"version": "v1.1.2",
"ecosystem": "go"
},
{
"name": "github.com/holiman/uint256",
"direct": false,
"version": "v1.2.4",
"ecosystem": "go"
},
{
"name": "github.com/huandu/xstrings",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/imdario/mergo",
"direct": false,
"version": "v0.3.16",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/bbloom",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-bitfield",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-cidutil",
"direct": false,
"version": "v0.1.1",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-dsqueue",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-ipld-legacy",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-metrics-interface",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/ipld/go-codec-dagpb",
"direct": false,
"version": "v1.7.0",
"ecosystem": "go"
},
{
"name": "github.com/ipld/go-ipld-prime",
"direct": false,
"version": "v0.24.0",
"ecosystem": "go"
},
{
"name": "github.com/jbenet/go-temp-err-catcher",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/jinzhu/copier",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/josharian/intern",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/json-iterator/go",
"direct": false,
"version": "v1.1.12",
"ecosystem": "go"
},
{
"name": "github.com/kisielk/gotool",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/cpuid/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/kylebanks/depth",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/leodido/go-urn",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-buffer-pool",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-libp2p",
"direct": false,
"version": "v0.48.0",
"ecosystem": "go"
},
{
"name": "github.com/lufia/plan9stats",
"direct": false,
"version": "v0.0.0-20211012122336-39d0f177ccd0",
"ecosystem": "go"
},
{
"name": "github.com/mailru/easyjson",
"direct": false,
"version": "v0.7.7",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/goutils",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/semver",
"direct": false,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/masterminds/sprig",
"direct": false,
"version": "v2.22.0+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.14",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.22",
"ecosystem": "go"
},
{
"name": "github.com/miekg/dns",
"direct": false,
"version": "v1.1.72",
"ecosystem": "go"
},
{
"name": "github.com/minio/sha256-simd",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/copystructure",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/go-homedir",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/mapstructure",
"direct": false,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/mitchellh/reflectwalk",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/concurrent",
"direct": false,
"version": "v0.0.0-20180306012644-bacd9c7ef1dd",
"ecosystem": "go"
},
{
"name": "github.com/modern-go/reflect2",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-base36",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multicodec",
"direct": false,
"version": "v0.10.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multistream",
"direct": false,
"version": "v0.6.1",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-varint",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/mwitkow/go-proto-validators",
"direct": false,
"version": "v0.3.2",
"ecosystem": "go"
},
{
"name": "github.com/ncruces/go-strftime",
"direct": false,
"version": "v0.1.9",
"ecosystem": "go"
},
{
"name": "github.com/otiai10/mint",
"direct": false,
"version": "v1.6.3",
"ecosystem": "go"
},
{
"name": "github.com/pelletier/go-toml/v2",
"direct": false,
"version": "v2.2.4",
"ecosystem": "go"
},
{
"name": "github.com/petermattis/goid",
"direct": false,
"version": "v0.0.0-20240813172612-4fcff4a6cae7",
"ecosystem": "go"
},
{
"name": "github.com/planetscale/vtprotobuf",
"direct": false,
"version": "v0.6.1-0.20250313105119-ba97887b0a25",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
"ecosystem": "go"
},
{
"name": "github.com/polydawn/refmt",
"direct": false,
"version": "v0.90.0",
"ecosystem": "go"
},
{
"name": "github.com/power-devops/perfstat",
"direct": false,
"version": "v0.0.0-20240221224432-82ca36839d55",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.67.5",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.20.1",
"ecosystem": "go"
},
{
"name": "github.com/pseudomuto/protokit",
"direct": false,
"version": "v0.2.1",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/qpack",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/quic-go",
"direct": false,
"version": "v0.60.0",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/webtransport-go",
"direct": false,
"version": "v0.11.1",
"ecosystem": "go"
},
{
"name": "github.com/remyoudompheng/bigfft",
"direct": false,
"version": "v0.0.0-20230129092748-24d4a6f8daec",
"ecosystem": "go"
},
{
"name": "github.com/rs/cors",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/rs/zerolog",
"direct": false,
"version": "v1.34.0",
"ecosystem": "go"
},
{
"name": "github.com/sagikazarmark/locafero",
"direct": false,
"version": "v0.12.0",
"ecosystem": "go"
},
{
"name": "github.com/spaolacci/murmur3",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/afero",
"direct": false,
"version": "v1.15.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cast",
"direct": false,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": false,
"version": "v1.10.2",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "v1.0.10",
"ecosystem": "go"
},
{
"name": "github.com/spf13/viper",
"direct": false,
"version": "v1.21.0",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/objx",
"direct": false,
"version": "v0.5.3",
"ecosystem": "go"
},
{
"name": "github.com/subosito/gotenv",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/sv-tools/openapi",
"direct": false,
"version": "v0.2.1",
"ecosystem": "go"
},
{
"name": "github.com/tetratelabs/wazero",
"direct": false,
"version": "v1.10.1",
"ecosystem": "go"
},
{
"name": "github.com/tklauser/go-sysconf",
"direct": false,
"version": "v0.3.16",
"ecosystem": "go"
},
{
"name": "github.com/tklauser/numcpus",
"direct": false,
"version": "v0.11.0",
"ecosystem": "go"
},
{
"name": "github.com/twitchyliquid64/golang-asm",
"direct": false,
"version": "v0.15.1",
"ecosystem": "go"
},
{
"name": "github.com/uber/jaeger-lib",
"direct": false,
"version": "v2.4.1+incompatible",
"ecosystem": "go"
},
{
"name": "github.com/ugorji/go/codec",
"direct": false,
"version": "v1.2.12",
"ecosystem": "go"
},
{
"name": "github.com/whyrusleeping/chunker",
"direct": false,
"version": "v0.0.0-20181014151217-fe64bd25879f",
"ecosystem": "go"
},
{
"name": "github.com/xeipuuv/gojsonpointer",
"direct": false,
"version": "v0.0.0-20180127040702-4e3ac2762d5f",
"ecosystem": "go"
},
{
"name": "github.com/xeipuuv/gojsonreference",
"direct": false,
"version": "v0.0.0-20180127040603-bd5ef7bd5415",
"ecosystem": "go"
},
{
"name": "github.com/yusufpapurcu/wmi",
"direct": false,
"version": "v1.2.4",
"ecosystem": "go"
},
{
"name": "github.com/zeebo/errs",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "go.opencensus.io",
"direct": false,
"version": "v0.24.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v2",
"direct": false,
"version": "v2.4.4",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v3",
"direct": false,
"version": "v3.0.4",
"ecosystem": "go"
},
{
"name": "golang.org/x/arch",
"direct": false,
"version": "v0.8.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.54.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "v0.38.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.15.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.48.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/api",
"direct": false,
"version": "v0.0.0-20260526163538-3dc84a4a5aaa",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "lukechampine.com/blake3",
"direct": false,
"version": "v1.4.1",
"ecosystem": "go"
},
{
"name": "modernc.org/libc",
"direct": false,
"version": "v1.66.8",
"ecosystem": "go"
},
{
"name": "modernc.org/mathutil",
"direct": false,
"version": "v1.7.1",
"ecosystem": "go"
},
{
"name": "modernc.org/memory",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "modernc.org/sqlite",
"direct": false,
"version": "v1.37.1",
"ecosystem": "go"
},
{
"name": "nhooyr.io/websocket",
"direct": false,
"version": "v1.8.7",
"ecosystem": "go"
},
{
"name": "protoc-gen-grpc-web",
"direct": false,
"version": "^1.5.0",
"ecosystem": "npm"
},
{
"name": "protoc-gen-js",
"direct": false,
"version": "^3.21.4-4",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 282,
"direct_count": 108,
"indirect_count": 174
}
},
"maintainership": {
"issues": {
"open_prs": 49,
"merged_prs": 2542,
"open_issues": 43,
"closed_ratio": 0.777,
"closed_issues": 150,
"closed_unmerged_prs": 429
},
"bus_factor": 3,
"bot_contributors": 3,
"top_contributors": [
{
"type": "User",
"login": "requilence",
"commits": 4680,
"avatar_url": "https://avatars.githubusercontent.com/u/1025231?v=4"
},
{
"type": "User",
"login": "KirillSto",
"commits": 2466,
"avatar_url": "https://avatars.githubusercontent.com/u/40611691?v=4"
},
{
"type": "User",
"login": "AnastasiaShemyakinskaya",
"commits": 2401,
"avatar_url": "https://avatars.githubusercontent.com/u/36507473?v=4"
},
{
"type": "User",
"login": "cheggaaa",
"commits": 1888,
"avatar_url": "https://avatars.githubusercontent.com/u/426551?v=4"
},
{
"type": "User",
"login": "mcrakhman",
"commits": 1445,
"avatar_url": "https://avatars.githubusercontent.com/u/16068868?v=4"
},
{
"type": "User",
"login": "fat-fellow",
"commits": 947,
"avatar_url": "https://avatars.githubusercontent.com/u/12934321?v=4"
},
{
"type": "User",
"login": "deff7",
"commits": 726,
"avatar_url": "https://avatars.githubusercontent.com/u/5281437?v=4"
},
{
"type": "User",
"login": "jmetrikat",
"commits": 696,
"avatar_url": "https://avatars.githubusercontent.com/u/120120832?v=4"
},
{
"type": "User",
"login": "mrpza",
"commits": 302,
"avatar_url": "https://avatars.githubusercontent.com/u/10455965?v=4"
},
{
"type": "User",
"login": "zarkone",
"commits": 208,
"avatar_url": "https://avatars.githubusercontent.com/u/1899654?v=4"
}
],
"contributors_sampled": 33,
"top_contributor_share": 0.284
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml",
"cla.yml",
"golangci-lint.yml",
"mirror-any-block.yml",
"nightly.yml",
"perftests-grafana.yml",
"perftests.yml",
"reusable_wait_for_perftest.yml",
"reusable_wait_for_self_hosted_mac_mini.yml",
"smoke-tests.yml",
"test.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 1/9 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 18 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "19 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d03cedda1073744beab396559622e7847a955f1f",
"ran_at": "2026-07-22T18:43:01Z",
"aggregate_score": 5.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T06:21:35Z",
"oldest_open_prs": [
{
"number": 1964,
"created_at": "2024-12-18T22:19:34Z",
"last_comment_at": "2025-04-09T09:24:42Z",
"last_comment_author": "github-actions"
},
{
"number": 2170,
"created_at": "2025-02-27T08:27:07Z",
"last_comment_at": "2025-04-11T13:17:31Z",
"last_comment_author": "github-actions"
},
{
"number": 2229,
"created_at": "2025-03-17T15:48:31Z",
"last_comment_at": "2025-04-18T22:22:41Z",
"last_comment_author": "github-actions"
},
{
"number": 2394,
"created_at": "2025-05-07T04:09:45Z",
"last_comment_at": "2025-05-07T04:26:31Z",
"last_comment_author": "github-actions"
},
{
"number": 2416,
"created_at": "2025-05-16T10:28:57Z",
"last_comment_at": "2025-06-05T18:40:52Z",
"last_comment_author": "github-actions"
},
{
"number": 2519,
"created_at": "2025-06-20T17:01:29Z",
"last_comment_at": "2025-06-20T17:18:34Z",
"last_comment_author": "github-actions"
},
{
"number": 2559,
"created_at": "2025-07-09T14:05:43Z",
"last_comment_at": "2025-07-09T14:30:40Z",
"last_comment_author": "github-actions"
},
{
"number": 2580,
"created_at": "2025-07-23T04:21:08Z",
"last_comment_at": "2025-07-23T04:30:41Z",
"last_comment_author": "github-actions"
},
{
"number": 2603,
"created_at": "2025-08-02T08:31:05Z",
"last_comment_at": "2025-10-14T12:40:58Z",
"last_comment_author": "github-actions"
},
{
"number": 2646,
"created_at": "2025-08-15T04:12:09Z",
"last_comment_at": "2025-08-15T04:21:05Z",
"last_comment_author": "github-actions"
},
{
"number": 2654,
"created_at": "2025-08-20T08:15:40Z",
"last_comment_at": "2025-08-20T08:24:23Z",
"last_comment_author": "github-actions"
},
{
"number": 2655,
"created_at": "2025-08-20T12:02:05Z",
"last_comment_at": "2025-08-23T18:24:30Z",
"last_comment_author": "christojeffrey"
},
{
"number": 2664,
"created_at": "2025-08-28T06:25:58Z",
"last_comment_at": "2025-08-28T06:35:42Z",
"last_comment_author": "github-actions"
},
{
"number": 2711,
"created_at": "2025-09-22T04:07:34Z",
"last_comment_at": "2025-09-22T04:16:25Z",
"last_comment_author": "github-actions"
},
{
"number": 2744,
"created_at": "2025-10-07T04:08:43Z",
"last_comment_at": "2025-10-07T04:18:00Z",
"last_comment_author": "github-actions"
},
{
"number": 2753,
"created_at": "2025-10-09T04:09:20Z",
"last_comment_at": "2025-10-09T04:19:24Z",
"last_comment_author": "github-actions"
},
{
"number": 2762,
"created_at": "2025-10-10T17:05:51Z",
"last_comment_at": "2025-10-10T17:15:16Z",
"last_comment_author": "github-actions"
},
{
"number": 2763,
"created_at": "2025-10-13T04:08:54Z",
"last_comment_at": "2025-11-07T11:35:41Z",
"last_comment_author": "github-actions"
},
{
"number": 2768,
"created_at": "2025-10-17T04:08:53Z",
"last_comment_at": "2025-10-17T04:18:57Z",
"last_comment_author": "github-actions"
},
{
"number": 2780,
"created_at": "2025-10-29T17:12:45Z",
"last_comment_at": "2025-10-29T17:24:11Z",
"last_comment_author": "github-actions"
}
],
"last_merged_pr_at": "2026-07-17T23:05:36Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 2824,
"created_at": "2025-03-24T12:34:13Z",
"last_comment_at": "2026-07-18T09:43:52Z",
"last_comment_author": "blaggacao"
},
{
"number": 2342,
"created_at": "2025-04-15T08:50:34Z",
"last_comment_at": "2026-03-20T16:52:16Z",
"last_comment_author": "sashagood"
},
{
"number": 2365,
"created_at": "2025-04-20T04:05:13Z",
"last_comment_at": "2026-03-20T16:52:15Z",
"last_comment_author": "sashagood"
},
{
"number": 2439,
"created_at": "2025-05-22T15:42:40Z",
"last_comment_at": "2026-03-20T16:52:14Z",
"last_comment_author": "sashagood"
},
{
"number": 2480,
"created_at": "2025-06-10T18:47:37Z",
"last_comment_at": "2025-06-10T18:59:02Z",
"last_comment_author": "axelkar"
},
{
"number": 2505,
"created_at": "2025-06-14T11:08:39Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2517,
"created_at": "2025-06-18T11:56:57Z",
"last_comment_at": "2026-03-20T16:52:12Z",
"last_comment_author": "sashagood"
},
{
"number": 2537,
"created_at": "2025-06-26T12:15:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2572,
"created_at": "2025-06-30T12:21:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2549,
"created_at": "2025-07-03T17:59:54Z",
"last_comment_at": "2026-03-20T16:51:58Z",
"last_comment_author": "sashagood"
},
{
"number": 2553,
"created_at": "2025-07-06T16:59:12Z",
"last_comment_at": "2025-07-06T17:00:00Z",
"last_comment_author": "albertomorini"
},
{
"number": 2568,
"created_at": "2025-07-15T21:50:41Z",
"last_comment_at": "2026-03-20T19:52:56Z",
"last_comment_author": "sashagood"
},
{
"number": 2771,
"created_at": "2025-10-19T11:01:02Z",
"last_comment_at": "2026-03-20T19:52:55Z",
"last_comment_author": "sashagood"
},
{
"number": 2792,
"created_at": "2025-11-07T23:48:45Z",
"last_comment_at": "2026-03-20T16:52:11Z",
"last_comment_author": "sashagood"
},
{
"number": 2823,
"created_at": "2025-11-27T08:18:45Z",
"last_comment_at": "2026-07-18T09:39:23Z",
"last_comment_author": "blaggacao"
},
{
"number": 2877,
"created_at": "2026-01-03T21:00:56Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2879,
"created_at": "2026-01-05T19:49:27Z",
"last_comment_at": "2026-01-10T07:52:27Z",
"last_comment_author": "stevelr"
},
{
"number": 2883,
"created_at": "2026-01-07T01:05:56Z",
"last_comment_at": "2026-03-20T19:52:54Z",
"last_comment_author": "sashagood"
},
{
"number": 2885,
"created_at": "2026-01-07T23:54:54Z",
"last_comment_at": "2026-03-20T19:52:53Z",
"last_comment_author": "sashagood"
},
{
"number": 2887,
"created_at": "2026-01-09T22:56:31Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/anyproto/anytype-heart",
"host": "github.com",
"name": "anytype-heart",
"owner": "anyproto"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"security": 52,
"vitality": 96,
"community": 74,
"governance": 79,
"engineering": 92
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 96,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"commits_last_year": 2316,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 52
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "52/52 weeks with commits",
"points": 36,
"status": "met",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 52
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "2316 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 2316
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.50.17",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 1.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 4,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 4 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 4
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 74,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"forks": 113,
"stars": 405,
"watchers": 5,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "405 stars",
"points": 42.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 405
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "113 forks",
"points": 17.1,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 113
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "5 watchers",
"points": 3.3,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 5
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 79,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 33,
"top_contributor_share": 0.284
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 28% of commits",
"points": 16.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 28
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "33 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 33
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 18 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"merged_prs": 2542,
"open_issues": 43,
"closed_issues": 150,
"issue_closed_ratio": 0.777,
"closed_unmerged_prs": 429
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "78% of issues closed",
"points": 36.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 78
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "2542/2971 decided PRs merged",
"points": 32.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 2542,
"decided": 2971
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/9 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"followers": 6180,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "anyproto",
"public_repos": 90,
"account_age_days": 1224
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "6,180 followers of anyproto",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 6180,
"login": "anyproto"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "90 public repos, account ~3 yr old",
"points": 19.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 90
}
},
{
"code": "account_age_years",
"params": {
"years": 3
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/anyproto/anytype-heart"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "619 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 619
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 92,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "11 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 11
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"e2ee",
"local-first",
"offline-first",
"p2p",
"privacy",
"anytype"
],
"has_wiki": false,
"homepage": "https://anytype.io",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://anytype.io",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 52,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 55,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/9 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 18 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "19 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "at_risk",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 280 resolved dependencies against OSV; 2 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 280
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 2
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "osv",
"advisories": 28,
"affected_packages": 8,
"assessed_packages": 280,
"unassessed_packages": 2,
"affected_by_severity": "critical 1, high 3, moderate 1, low 1, unknown 2",
"direct_affected_packages": 6
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "6 affected: google.golang.org/grpc v1.81.1 (critical 9.1), github.com/ethereum/go-ethereum v1.13.15 (high 7.5), github.com/golang-jwt/jwt v3.2.2+incompatible (high 7.5), +3 more",
"points": 5.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 6,
"packages": "google.golang.org/grpc v1.81.1 (critical 9.1), github.com/ethereum/go-ethereum v1.13.15 (high 7.5), github.com/golang-jwt/jwt v3.2.2+incompatible (high 7.5)"
}
},
{
"code": "advisories_affected_more",
"params": {
"count": 3
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "4 advisory-carrying package(s) unaddressed past 90 days; oldest published 487 days ago",
"points": 24.4,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 4,
"oldest": 487
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 280,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 78,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.85,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"core/api/CLAUDE.md",
"core/block/AGENTS.md",
"core/block/import/AGENTS.md"
],
"agent_instruction_max_bytes": 7930
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md, core/api/CLAUDE.md, core/block/AGENTS.md, core/block/import/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md, core/api/CLAUDE.md, core/block/AGENTS.md, core/block/import/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "85 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 85,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"has_nix": true,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"build.gradle",
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, Nix, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, Nix, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "dependency automation configured, none observed in the sampled commits",
"points": 5,
"status": "partial",
"details": [
{
"code": "dependency_bot_config_only",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 8134782,
"source_files_sampled": 1492,
"oversized_source_files": 21
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "21/1492 source files over 60KB",
"points": 54.2,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 1492,
"oversized": 21
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"core/api/docs/openapi.json",
"core/api/docs/openapi.yaml",
"pb/protos/changes.proto",
"pb/protos/commands.proto",
"pb/protos/events.proto",
"pb/protos/service/service.proto",
"pb/protos/snapshot.proto",
"pkg/lib/pb/model/protos/localstore.proto",
"pkg/lib/pb/model/protos/models.proto",
"pkg/lib/pb/storage/protos/file.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "core/api/docs/openapi.json, core/api/docs/openapi.yaml, pb/protos/changes.proto, pb/protos/commands.proto, pb/protos/events.proto, pb/protos/service/service.proto, pb/protos/snapshot.proto, pkg/lib/pb/model/protos/localstore.proto, pkg/lib/pb/model/protos/models.proto, pkg/lib/pb/storage/protos/file.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "core/api/docs/openapi.json, core/api/docs/openapi.yaml, pb/protos/changes.proto, pb/protos/commands.proto, pb/protos/events.proto, pb/protos/service/service.proto, pb/protos/snapshot.proto, pkg/lib/pb/model/protos/localstore.proto, pkg/lib/pb/model/protos/models.proto, pkg/lib/pb/storage/protos/file.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch npm package 'anytype-ts-bindings' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-22T18:43:31.088443Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/anyproto/anytype-heart.svg",
"full_name": "anyproto/anytype-heart",
"license_state": "custom",
"license_spdx": null
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with anyproto/anytype-heart. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
