Public recordGood
Software health reportschema 0.23.0 · metrics 1.13.0 · 2026-07-21 18:44 UTC
argotorg / hevm
Symbolic and concrete EVM execution engine
argotorg/hevm holds a health index of 71 out of 100, placing it in the Good band. It scores highest on Vitality (86/100) and lowest on AI Readiness (53/100). It was last updated today. 3 contributors account for most of its recent work.
71
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
71
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Argot CollectiveOrganization
196 followers21 public repossince Sep 2024
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
86
Development activity
92Excellent
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 28.4/36 | Commit cadence — 41/52 weeks with commits |
| 18/18 | Commit volume — 509 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 509 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 41 |
Release discipline
76Good
How it's scored
| 27/27 | Ships releases — 17 releases published |
| 36/36 | Release recency — latest release 22 days ago |
| 12.6/27 | Release cadence — a release every ~124.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 17 |
| latest_release_tag | release/0.58.0 |
| releases_from_tags | no |
| days_since_latest_release | 22 |
| mean_days_between_releases | 124.8 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
60
Popularity & adoption
62Moderate
How it's scored
| 41.3/60 | Stars — 353 stars |
| 15.8/25 | Forks — 79 forks |
| 4.7/15 | Watchers — 8 watchers |
Inputs used
| forks | 79 |
| stars | 353 |
| watchers | 8 |
| growth_state | organic |
| growth_factor_pct | 100 |
Community health
57Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (AGPL-3.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | yes |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
73
How it's scored
| 36/54 | Bus factor — 3 contributor(s) cover half of all commits |
| 17.4/22.5 | Commit distribution — top contributor authored 23% of commits |
| 13.5/13.5 | Contributor breadth — 100 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 30 contributing companies or organizations |
Inputs used
| bus_factor | 3 |
| contributors_sampled | 100 |
| top_contributor_share | 0.228 |
How it's scored
| 37.9/46.8 | Issue resolution — 81% of issues closed |
| 34.2/38.3 | PR acceptance — 702/786 decided PRs merged |
| 9/15 | OpenSSF Scorecard: Code-Review — Found 9/13 approved changesets -- score normalized to 6 |
Inputs used
| merged_prs | 702 |
| open_issues | 53 |
| closed_issues | 228 |
| issue_closed_ratio | 0.811 |
| closed_unmerged_prs | 84 |
Ownership & stewardship
60Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 16.5/25 | Owner reach — 196 followers of argotorg |
| 13.5/25 | Track record — 21 public repos, account ~1 yr old |
Inputs used
| followers | 196 |
| owner_type | Organization |
| is_verified | — |
| owner_login | argotorg |
| public_repos | 21 |
| account_age_days | 672 |
Engineering Quality
Are baseline engineering and documentation practices in place?
73
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 5 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 13 out of 13 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
80Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://hevm.dev |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | https://hevm.dev |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
57
Security posture
46At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 2.5/2.5 | CI-Tests — 13 out of 13 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 4.5/7.5 | Code-Review — Found 9/13 approved changesets -- score normalized to 6 |
| 2.5/2.5 | Contributors — project has 30 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0.8/7.5 | Vulnerabilities — 9 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4.6 |
Excluded from scoring (no data or not applicable): branch_protection, packaging. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 84 |
| affected_packages | 10 |
| assessed_packages | 246 |
| unassessed_packages | 0 |
| affected_by_severity | critical 1, high 6, moderate 3 |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 246 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
53
Agent context & guidance
33At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 33.1/40 | Legible commit history — 62 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.62 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
53Moderate
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Haskell (statically typed) |
| 10/10 | Reproducible environment — Nix, lockfile |
| 10/10 | Demonstrated agent practice — 11 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | yes |
| has_tests | yes |
| lockfiles | package-lock.json, yarn.lock |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.11 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
93Excellent
How it's scored
| 45/45 | Type-checkable code — Haskell (statically typed) |
| 47.7/55 | Manageable file sizes — 2/15 source files over 60KB |
Inputs used
| primary_language | Haskell |
| largest_source_bytes | 2,509,240 |
| source_files_sampled | 15 |
| oversized_source_files | 2 |
Key facts
353GitHub stars
100contributors
509commits, last 12 months
0days since last push
17releases
3bus factor
53open issues
npmpackage ecosystems
More detail
Star and fork history 353 ★ / 79 ⇿
353Stars
79Forks
17Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 1
Each point covers 4 days.
OpenSSF Scorecard 4.6 / 10
4.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 13 out of 13 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 6 | Code-Review | Found 9/13 approved changesets -- score normalized to 6 |
| 10 | Contributors | project has 30 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 1 | Vulnerabilities | 9 existing vulnerabilities detected |
All dependencies 246
Full resolved dependency set from the GitHub dependency graph: 0 direct and 246 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/aristanetworks/goarista | 0.0.0-20170210015632-ea17b1a17847 | indirect |
| Go | github.com/aws/aws-sdk-go | 1.25.48 | indirect |
| Go | github.com/elastic/gosigar | 0.8.1-0.20180330100440-37f05ff46ffa | indirect |
| Go | github.com/ethereum/go-ethereum | 1.10.6 | indirect |
| Go | github.com/oneofone/xxhash | 1.2.5 | indirect |
| Go | github.com/pborman/uuid | 0.0.0-20170112150404-1b00554d8222 | indirect |
| Go | github.com/robertkrimen/otto | 0.0.0-20170205013659-6a77b7cbc37d | indirect |
| Go | github.com/rs/xhandler | 0.0.0-20160618193221-ed27b6fd6521 | indirect |
| Go | github.com/spaolacci/murmur3 | 1.0.1-0.20190317074736-539464a789e9 | indirect |
| Go | github.com/steakknife/bloomfilter | 0.0.0-20180922174646-6819c0d2a570 | indirect |
| Go | github.com/steakknife/hamming | 0.0.0-20180906055917-c99c65617cd3 | indirect |
| Go | github.com/wsddn/go-ecdh | 0.0.0-20161211032359-48726bab9208 | indirect |
| Go | golang.org/x/crypto | 0.0.0-20210322153248-0c34fe9e7dc2 | indirect |
| Go | golang.org/x/mobile | 0.0.0-20200801112145-973feb4309de | indirect |
| Go | gopkg.in/sourcemap.v1 | 1.0.5 | indirect |
| Go | gopkg.in/urfave/cli.v1 | 1.20.0 | indirect |
| npm | @babel/code-frame | 7.18.6 | indirect |
| npm | @babel/helper-validator-identifier | 7.19.1 | indirect |
| npm | @babel/highlight | 7.18.6 | indirect |
| npm | @iarna/toml | 2.2.5 | indirect |
| npm | @jridgewell/gen-mapping | 0.3.2 | indirect |
| npm | @jridgewell/resolve-uri | 3.1.0 | indirect |
| npm | @jridgewell/set-array | 1.1.2 | indirect |
| npm | @jridgewell/source-map | 0.3.2 | indirect |
| npm | @jridgewell/sourcemap-codec | 1.4.14 | indirect |
| npm | @jridgewell/trace-mapping | 0.3.17 | indirect |
| npm | @lezer/common | 0.15.12 | indirect |
| npm | @lezer/lr | 0.15.8 | indirect |
| npm | @lmdb/lmdb-darwin-arm64 | 2.5.2 | indirect |
| npm | @lmdb/lmdb-darwin-x64 | 2.5.2 | indirect |
| npm | @lmdb/lmdb-linux-arm | 2.5.2 | indirect |
| npm | @lmdb/lmdb-linux-arm64 | 2.5.2 | indirect |
| npm | @lmdb/lmdb-linux-x64 | 2.5.2 | indirect |
| npm | @lmdb/lmdb-win32-x64 | 2.5.2 | indirect |
| npm | @mischnic/json-sourcemap | 0.1.0 | indirect |
| npm | @msgpackr-extract/msgpackr-extract-darwin-arm64 | 2.2.0 | indirect |
| npm | @msgpackr-extract/msgpackr-extract-darwin-x64 | 2.2.0 | indirect |
| npm | @msgpackr-extract/msgpackr-extract-linux-arm | 2.2.0 | indirect |
| npm | @msgpackr-extract/msgpackr-extract-linux-arm64 | 2.2.0 | indirect |
| npm | @msgpackr-extract/msgpackr-extract-linux-x64 | 2.2.0 | indirect |
| npm | @msgpackr-extract/msgpackr-extract-win32-x64 | 2.2.0 | indirect |
| npm | @parcel/bundler-default | 2.8.1 | indirect |
| npm | @parcel/cache | 2.8.1 | indirect |
| npm | @parcel/codeframe | 2.8.1 | indirect |
| npm | @parcel/compressor-raw | 2.8.1 | indirect |
| npm | @parcel/config-default | 2.8.1 | indirect |
| npm | @parcel/core | 2.8.1 | indirect |
| npm | @parcel/diagnostic | 2.8.1 | indirect |
| npm | @parcel/events | 2.8.1 | indirect |
| npm | @parcel/fs | 2.8.1 | indirect |
| npm | @parcel/fs-search | 2.8.1 | indirect |
| npm | @parcel/graph | 2.8.1 | indirect |
| npm | @parcel/hash | 2.8.1 | indirect |
| npm | @parcel/logger | 2.8.1 | indirect |
| npm | @parcel/markdown-ansi | 2.8.1 | indirect |
| npm | @parcel/namer-default | 2.8.1 | indirect |
| npm | @parcel/node-resolver-core | 2.8.1 | indirect |
| npm | @parcel/optimizer-css | 2.8.1 | indirect |
| npm | @parcel/optimizer-htmlnano | 2.8.1 | indirect |
| npm | @parcel/optimizer-image | 2.8.1 | indirect |
| npm | @parcel/optimizer-svgo | 2.8.1 | indirect |
| npm | @parcel/optimizer-terser | 2.8.1 | indirect |
| npm | @parcel/package-manager | 2.8.1 | indirect |
| npm | @parcel/packager-css | 2.8.1 | indirect |
| npm | @parcel/packager-html | 2.8.1 | indirect |
| npm | @parcel/packager-js | 2.8.1 | indirect |
| npm | @parcel/packager-raw | 2.8.1 | indirect |
| npm | @parcel/packager-svg | 2.8.1 | indirect |
| npm | @parcel/plugin | 2.8.1 | indirect |
| npm | @parcel/reporter-cli | 2.8.1 | indirect |
| npm | @parcel/reporter-dev-server | 2.8.1 | indirect |
| npm | @parcel/resolver-default | 2.8.1 | indirect |
| npm | @parcel/runtime-browser-hmr | 2.8.1 | indirect |
| npm | @parcel/runtime-js | 2.8.1 | indirect |
| npm | @parcel/runtime-react-refresh | 2.8.1 | indirect |
| npm | @parcel/runtime-service-worker | 2.8.1 | indirect |
| npm | @parcel/source-map | 2.1.1 | indirect |
| npm | @parcel/transformer-babel | 2.8.1 | indirect |
| npm | @parcel/transformer-css | 2.8.1 | indirect |
| npm | @parcel/transformer-html | 2.8.1 | indirect |
| npm | @parcel/transformer-image | 2.8.1 | indirect |
| npm | @parcel/transformer-js | 2.8.1 | indirect |
| npm | @parcel/transformer-json | 2.8.1 | indirect |
| npm | @parcel/transformer-postcss | 2.8.1 | indirect |
| npm | @parcel/transformer-posthtml | 2.8.1 | indirect |
| npm | @parcel/transformer-raw | 2.8.1 | indirect |
| npm | @parcel/transformer-react-refresh-wrap | 2.8.1 | indirect |
| npm | @parcel/transformer-svg | 2.8.1 | indirect |
| npm | @parcel/types | 2.8.1 | indirect |
| npm | @parcel/utils | 2.8.1 | indirect |
| npm | @parcel/watcher | 2.0.7 | indirect |
| npm | @parcel/workers | 2.8.1 | indirect |
| npm | @prettier/cli | 0.3.0 | indirect |
| npm | @swc/helpers | 0.4.14 | indirect |
| npm | @trysound/sax | 0.2.0 | indirect |
| npm | @types/parse-json | 4.0.0 | indirect |
| npm | abortcontroller-polyfill | 1.7.5 | indirect |
| npm | acorn | 8.8.1 | indirect |
| npm | ansi-purge | 1.0.0 | indirect |
| npm | ansi-styles | 3.2.1 | indirect |
| npm | ansi-styles | 4.3.0 | indirect |
| npm | ansi-truncate | 1.1.2 | indirect |
| npm | argparse | 2.0.1 | indirect |
| npm | atomically | 2.0.2 | indirect |
| npm | base-x | 3.0.9 | indirect |
| npm | binary-extensions | 2.3.0 | indirect |
| npm | boolbase | 1.0.0 | indirect |
| npm | browserslist | 4.21.4 | indirect |
| npm | buffer-from | 1.1.2 | indirect |
| npm | callsites | 3.1.0 | indirect |
| npm | caniuse-lite | 1.0.30001439 | indirect |
| npm | chalk | 2.4.2 | indirect |
| npm | chalk | 4.1.2 | indirect |
| npm | chrome-trace-event | 1.0.3 | indirect |
| npm | clone | 2.1.2 | indirect |
| npm | color-convert | 1.9.3 | indirect |
| npm | color-convert | 2.0.1 | indirect |
| npm | color-name | 1.1.3 | indirect |
| npm | color-name | 1.1.4 | indirect |
| npm | commander | 2.20.3 | indirect |
| npm | commander | 7.2.0 | indirect |
| npm | cosmiconfig | 7.1.0 | indirect |
| npm | css-select | 4.3.0 | indirect |
| npm | css-tree | 1.1.3 | indirect |
| npm | css-what | 6.1.0 | indirect |
| npm | csso | 4.2.0 | indirect |
| npm | detect-libc | 1.0.3 | indirect |
| npm | dettle | 1.0.1 | indirect |
| npm | dom-serializer | 1.4.1 | indirect |
| npm | domelementtype | 2.3.0 | indirect |
| npm | domhandler | 4.3.1 | indirect |
| npm | domutils | 2.8.0 | indirect |
| npm | dotenv | 7.0.0 | indirect |
| npm | dotenv-expand | 5.1.0 | indirect |
| npm | electron-to-chromium | 1.4.284 | indirect |
| npm | entities | 2.2.0 | indirect |
| npm | entities | 3.0.1 | indirect |
| npm | error-ex | 1.3.2 | indirect |
| npm | escalade | 3.1.1 | indirect |
| npm | escape-string-regexp | 1.0.5 | indirect |
| npm | fast-ignore | 1.1.1 | indirect |
| npm | fast-string-truncated-width | 1.1.0 | indirect |
| npm | fast-string-width | 1.0.5 | indirect |
| npm | find-up-json | 2.0.4 | indirect |
| npm | find-up-path | 1.0.0 | indirect |
| npm | get-current-package | 1.0.0 | indirect |
| npm | get-port | 4.2.0 | indirect |
| npm | globals | 13.18.0 | indirect |
| npm | grammex | 3.1.3 | indirect |
| npm | has-flag | 3.0.0 | indirect |
| npm | has-flag | 4.0.0 | indirect |
| npm | highlight.js | 10.7.3 | indirect |
| npm | highlightjs-solidity | 2.0.5 | indirect |
| npm | htmlnano | 2.0.3 | indirect |
| npm | htmlparser2 | 7.2.0 | indirect |
| npm | import-fresh | 3.3.0 | indirect |
| npm | import-meta-resolve | 4.0.0 | indirect |
| npm | ini-simple-parser | 1.0.0 | indirect |
| npm | ionstore | 1.0.0 | indirect |
| npm | is-arrayish | 0.2.1 | indirect |
| npm | is-binary-path | 2.1.0 | indirect |
| npm | is-json | 2.0.1 | indirect |
| npm | js-tokens | 4.0.0 | indirect |
| npm | js-yaml | 4.1.0 | indirect |
| npm | json-parse-even-better-errors | 2.3.1 | indirect |
| npm | json-sorted-stringify | 1.0.0 | indirect |
| npm | json5 | 2.2.3 | indirect |
| npm | kasi | 1.1.0 | indirect |
| npm | lightningcss | 1.17.1 | indirect |
| npm | lightningcss-darwin-arm64 | 1.17.1 | indirect |
| npm | lightningcss-darwin-x64 | 1.17.1 | indirect |
| npm | lightningcss-linux-arm-gnueabihf | 1.17.1 | indirect |
| npm | lightningcss-linux-arm64-gnu | 1.17.1 | indirect |
| npm | lightningcss-linux-arm64-musl | 1.17.1 | indirect |
| npm | lightningcss-linux-x64-gnu | 1.17.1 | indirect |
| npm | lightningcss-linux-x64-musl | 1.17.1 | indirect |
| npm | lightningcss-win32-x64-msvc | 1.17.1 | indirect |
| npm | lines-and-columns | 1.2.4 | indirect |
| npm | lmdb | 2.5.2 | indirect |
| npm | mdn-data | 2.0.14 | indirect |
| npm | msgpackr | 1.8.1 | indirect |
| npm | msgpackr-extract | 2.2.0 | indirect |
| npm | node-addon-api | 3.2.1 | indirect |
| npm | node-addon-api | 4.3.0 | indirect |
| npm | node-gyp-build | 4.5.0 | indirect |
| npm | node-gyp-build-optional-packages | 5.0.3 | indirect |
| npm | node-releases | 2.0.6 | indirect |
| npm | nth-check | 2.1.1 | indirect |
| npm | nullthrows | 1.1.1 | indirect |
| npm | ordered-binary | 1.4.0 | indirect |
| npm | parcel | 2.8.1 | indirect |
| npm | parent-module | 1.0.1 | indirect |
| npm | parse-json | 5.2.0 | indirect |
| npm | path-type | 4.0.0 | indirect |
| npm | picocolors | 1.0.0 | indirect |
| npm | pioppo | 1.1.0 | indirect |
| npm | postcss-value-parser | 4.2.0 | indirect |
| npm | posthtml | 0.16.6 | indirect |
| npm | posthtml-parser | 0.10.2 | indirect |
| npm | posthtml-parser | 0.11.0 | indirect |
| npm | posthtml-render | 3.0.0 | indirect |
| npm | prettier | 3.2.5 | indirect |
| npm | prettier | 4.0.0-alpha.8 | indirect |
| npm | promise-make-naked | 2.1.1 | indirect |
| npm | react-error-overlay | 6.0.9 | indirect |
| npm | react-refresh | 0.9.0 | indirect |
| npm | regenerator-runtime | 0.13.11 | indirect |
| npm | resolve-from | 4.0.0 | indirect |
| npm | safe-buffer | 5.2.1 | indirect |
| npm | semver | 5.7.1 | indirect |
| npm | source-map | 0.6.1 | indirect |
| npm | source-map-support | 0.5.21 | indirect |
| npm | specialist | 1.4.0 | indirect |
| npm | stable | 0.1.8 | indirect |
| npm | stdin-blocker | 2.0.0 | indirect |
| npm | stubborn-fs | 1.2.5 | indirect |
| npm | supports-color | 5.5.0 | indirect |
| npm | supports-color | 7.2.0 | indirect |
| npm | svgo | 2.8.0 | indirect |
| npm | term-size | 2.2.1 | indirect |
| npm | terser | 5.16.1 | indirect |
| npm | timsort | 0.3.0 | indirect |
| npm | tiny-bin | 1.7.1 | indirect |
| npm | tiny-colors | 2.1.2 | indirect |
| npm | tiny-cursor | 2.0.0 | indirect |
| npm | tiny-editorconfig | 1.0.0 | indirect |
| npm | tiny-jsonc | 1.0.1 | indirect |
| npm | tiny-levenshtein | 1.0.0 | indirect |
| npm | tiny-parse-argv | 2.4.0 | indirect |
| npm | tiny-readdir | 2.7.0 | indirect |
| npm | tiny-readdir-glob | 1.4.0 | indirect |
| npm | tiny-spinner | 2.0.3 | indirect |
| npm | tiny-truncate | 1.0.2 | indirect |
| npm | tiny-updater | 3.5.1 | indirect |
| npm | tslib | 2.4.1 | indirect |
| npm | type-fest | 0.20.2 | indirect |
| npm | update-browserslist-db | 1.0.10 | indirect |
| npm | utility-types | 3.10.0 | indirect |
| npm | v8-compile-cache | 2.3.0 | indirect |
| npm | weak-lru-cache | 1.2.2 | indirect |
| npm | webworker-shim | 1.1.0 | indirect |
| npm | when-exit | 2.1.2 | indirect |
| npm | worktank | 2.6.0 | indirect |
| npm | xxhash-wasm | 0.4.2 | indirect |
| npm | yaml | 1.10.2 | indirect |
| npm | zeptomatch | 1.2.2 | indirect |
Dependency advisories 10
This repository publishes no package the index resolves, so its own dependency graph was assessed — 246 packages, which also include development and test pins that never ship: 10 carry known advisories, of which 0 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| golang.org/x/crypto | 0.0.0-20210322153248-0c34fe9e7dc2 | indirect | critical | 43 | 3.4.0 |
| base-x | 3.0.9 | indirect | high | 1 | 5.0.1 |
| github.com/ethereum/go-ethereum | 1.10.6 | indirect | high | 26 | 1.17.0 |
| js-yaml | 4.1.0 | indirect | high | 3 | 4.3.0 |
| msgpackr | 1.8.1 | indirect | high | 1 | 1.10.1 |
| semver | 5.7.1 | indirect | high | 1 | 7.5.2 |
| svgo | 2.8.0 | indirect | high | 1 | 4.0.1 |
| @parcel/reporter-dev-server | 2.8.1 | indirect | moderate | 1 | 2.16.4 |
| github.com/aws/aws-sdk-go | 1.25.48 | indirect | moderate | 6 | 1.34.0 |
| yaml | 1.10.2 | indirect | moderate | 1 | 2.8.3 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 17578,
"has_wiki": false,
"homepage": "https://hevm.dev",
"languages": {
"C": 10360,
"C++": 6620,
"Nix": 9536,
"Shell": 249,
"Python": 3020,
"Haskell": 1292837,
"Solidity": 137006
},
"pushed_at": "2026-07-21T11:51:03Z",
"created_at": "2022-08-29T18:39:09Z",
"owner_type": "Organization",
"updated_at": "2026-07-21T14:37:30Z",
"description": "Symbolic and concrete EVM execution engine",
"is_archived": false,
"is_disabled": false,
"license_spdx": "AGPL-3.0",
"default_branch": "main",
"license_spdx_raw": "AGPL-3.0",
"primary_language": "Haskell",
"significant_languages": [
"Haskell"
]
},
"owner": {
"blog": "https://argot.org/",
"name": "Argot Collective",
"type": "Organization",
"login": "argotorg",
"company": null,
"location": null,
"followers": 196,
"avatar_url": "https://avatars.githubusercontent.com/u/181838465?v=4",
"created_at": "2024-09-17T10:05:38Z",
"is_verified": null,
"public_repos": 21,
"account_age_days": 672
},
"license": {
"state": "standard",
"spdx_id": "AGPL-3.0",
"raw_spdx": "AGPL-3.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "release/0.58.0",
"kind": "other",
"published_at": "2026-06-29T12:37:19Z"
},
{
"tag": "release/0.57.0",
"kind": "other",
"published_at": "2026-01-08T14:51:12Z"
},
{
"tag": "release/0.56.0",
"kind": "other",
"published_at": "2025-10-13T15:44:39Z"
},
{
"tag": "release/0.55.1",
"kind": "other",
"published_at": "2025-07-22T11:08:26Z"
},
{
"tag": "release/0.54.2",
"kind": "other",
"published_at": "2024-12-12T16:57:13Z"
},
{
"tag": "release/0.53.0",
"kind": "other",
"published_at": "2024-02-26T19:20:50Z"
},
{
"tag": "release/0.52.0",
"kind": "other",
"published_at": "2023-10-26T12:13:05Z"
},
{
"tag": "release/0.51.3",
"kind": "other",
"published_at": "2023-07-14T10:09:46Z"
},
{
"tag": "release/0.51.2",
"kind": "other",
"published_at": "2023-07-11T10:22:20Z"
},
{
"tag": "release/0.51.1",
"kind": "other",
"published_at": "2023-06-02T00:16:46Z"
},
{
"tag": "release/0.51.0",
"kind": "other",
"published_at": "2023-04-29T15:13:33Z"
},
{
"tag": "release/0.50.5",
"kind": "other",
"published_at": "2023-04-18T16:43:41Z"
},
{
"tag": "release/0.50.4",
"kind": "other",
"published_at": "2023-03-17T21:21:00Z"
},
{
"tag": "release/0.50.3",
"kind": "other",
"published_at": "2023-02-17T15:14:54Z"
},
{
"tag": "release/0.50.2",
"kind": "other",
"published_at": "2023-01-06T11:38:36Z"
},
{
"tag": "0.50.1",
"kind": "patch",
"published_at": "2022-12-30T17:05:40Z"
},
{
"tag": "v0.50.0",
"kind": "minor",
"published_at": "2022-12-19T18:54:37Z"
}
],
"recent_commits": [
{
"oid": "4ca42fd5b2dd1344b7596775fe5fe6ac2d03021f",
"body": "Decode cheatcode string args leniently instead of crashing on invalid UTF-8",
"is_bot": false,
"headline": "Merge pull request #1080 from argotorg/fix-cheatcode-invalid-utf8",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-07-21T11:51:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3d12d7f87a564e41ee51e7c6de4b89c9db2c1a0",
"body": "… UTF-8\n\nABI string values are raw bytes at runtime: the EVM does not enforce\nUTF-8 validity. The cheatcode handlers decoded them with the partial\ndecodeUtf8 (toString and vm.label), so passing a string containing e.g.\nbyte 0xbf through vm.setEnv crashed the whole run with 'Cannot decode\nbyte: Inval\n[…]\nviour change for valid UTF-8.\n\nAdds prove_invalidUTF8 to the cheatCodes.sol foundry suite, mirroring\nthe reproducer from the issue.\n\nFixes #1076\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Decode cheatcode string args leniently instead of crashing on invalid…",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-07-21T10:58:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7aa23222813a5c557b66293643bb25148634a071",
"body": "ci: pin z3 on windows to 4.15.2 (official release binary)",
"is_bot": false,
"headline": "Merge pull request #1081 from argotorg/ci-pin-z3-windows",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-07-21T10:57:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11fb0d3e71545939c5d6890fb26a1984a52a647e",
"body": "The windows job installed z3 from msys2's rolling package repo, so every\nCI run picked up whatever version msys2 currently ships. When msys2 moved\nfrom z3 4.15.2 to 4.16.0, three solver tests started failing on windows\nonly (negative-numbers-zero-comp, negative-numbers-zero-comp-simpleassert,\neq-iss\n[…]\n on), exactly like bitwuzla\nand cvc5 already are in this job. Solver upgrades now happen via an\nexplicit diff instead of silently on the runner.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: pin z3 on windows to 4.15.2 (official release binary)",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-07-21T09:23:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ade06ec1cb98f73cd9fa9e380c4c6f6410af5256",
"body": null,
"is_bot": false,
"headline": "Add forge-symbolic-tests bug suite (#1074)",
"author_name": "Mate Soos @ Argot",
"author_login": "msooseth",
"committed_at": "2026-07-06T13:58:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8963e3df0a95936fd34b348afe55e5ac03510236",
"body": "Replace imports requiring too new packages",
"is_bot": false,
"headline": "Merge pull request #1079 from argotorg/fix-build",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-06-29T12:28:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d23b8f649de849e99e2b844766424353c0a770c",
"body": null,
"is_bot": false,
"headline": "Replace imports requiring too new packages",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-06-29T10:19:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79b51e9384dda20a71d2456844a3e97d771b1945",
"body": "Bump version to 0.58.0",
"is_bot": false,
"headline": "Merge pull request #1078 from argotorg/dev-0.58.0",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-06-26T18:14:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce8b4d8430d6d9da4ab8e39c874619c03ffbcceb",
"body": null,
"is_bot": false,
"headline": "Update hevm.cabal",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-06-26T12:27:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c1a9e73627f6ecca6736c3c84b99e99e7a72cf3",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG.md",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-06-26T12:26:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7824b1e196eb634e68033a9b792bc0725e1ff3f3",
"body": "Revert \"ci: add arm64-linux release build\"",
"is_bot": false,
"headline": "Merge pull request #1077 from argotorg/revert-aarch64-release",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-06-26T12:20:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39e82098dc1185aa392b29e481bad803db5b27dc",
"body": "This reverts commit 5e37e203f4987425d6a5a5ca9b254d8d08a03aeb. The\narm64-linux static builds are broken, and no releases of arm64-linux\nbinaries have been made since this change was originally merged.",
"is_bot": false,
"headline": "Revert \"ci: add arm64-linux release build\"",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-06-26T12:14:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "408bf3100f1edbfc489b21b5218332e583e503a7",
"body": null,
"is_bot": false,
"headline": "Allow to concretize dynamic arrays in calldata up to N values (#1057)",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-06-24T13:36:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ebeee76be750465a948e50e8b026ed83a37479a",
"body": "Fix copyslice in case the copy is exactly ONE byte.",
"is_bot": false,
"headline": "Merge pull request #1071 from argotorg/fix-off-by-one-copyslice",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-06-18T13:26:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5702714b725bcb83939ccea9741c48bc81f90e07",
"body": null,
"is_bot": false,
"headline": "Add assertApproxEqRel cheatcode (uint256 and int256) (#1067)",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-06-17T16:15:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5506deef6f3269b8e2653532b6ce85a5811444b7",
"body": null,
"is_bot": false,
"headline": "Add changelog",
"author_name": "Mate Soos",
"author_login": "msooseth",
"committed_at": "2026-06-17T15:43:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28f364bca465c38d0650091a45b4963b99a70115",
"body": "Update test",
"is_bot": false,
"headline": "Add test case",
"author_name": "Mate Soos",
"author_login": "msooseth",
"committed_at": "2026-06-17T15:42:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a1137b16f92c8bb90c6669cbdcb21be11316bf7",
"body": null,
"is_bot": false,
"headline": "fix-off-by-one-copyslice",
"author_name": "Mate Soos",
"author_login": "msooseth",
"committed_at": "2026-06-17T15:21:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13a8e5dbd0271284bf4c34b0ffd9f0b68dfb84b1",
"body": null,
"is_bot": false,
"headline": "Fix pranked CREATE2 address preimage (#1069)",
"author_name": "ForkFork Dog",
"author_login": "forkforkdog",
"committed_at": "2026-06-17T12:52:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "262984637991988c91aeaa99dee1174dda273e79",
"body": "…set (#1065)\n\nAdds a new readWord clause that elides a WriteWord whose offset is of\nthe form `Add (Lit c) X`, when X has a derivable static upper bound and\nthe write region is provably disjoint from the read in EVM (mod 2^256)\narithmetic. Backed by a new conservative `upperBound :: Expr EWord ->\nMa\n[…]\neWord at Add(Lit, Mul-And-bounded) skipped\n * negative: unbounded X — not skipped\n * negative: wrap-risk near maxBound — not skipped\n * negative: read region overlaps write min offset — not skipped",
"is_bot": false,
"headline": "Expr: sound disjointness rule for readWord/WriteWord with bounded off…",
"author_name": "Mate Soos @ Argot",
"author_login": "msooseth",
"committed_at": "2026-06-08T11:03:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8b2cb6266413f7f964e49053a278a895a21dc507",
"body": "Add RPC retry with exponential backoff and shared cooldown",
"is_bot": false,
"headline": "Merge pull request #1062 from argotorg/rpc-throttle",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-05-15T11:21:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e90b366429319bd65b1aed033332f323c6fd7f84",
"body": null,
"is_bot": false,
"headline": "Fixing build",
"author_name": "Mate Soos",
"author_login": "msooseth",
"committed_at": "2026-05-12T16:21:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30af7858aea3118c8ec6b8751e997b280c225619",
"body": "Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "update changelog for RPC retry with backoff and shared cooldown",
"author_name": "Mate Soos",
"author_login": "msooseth",
"committed_at": "2026-05-12T16:20:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d1bf222d39d26beed6eca085dc8526694b852cd2",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into rappie/rpc-throttle",
"author_name": "Mate Soos @ Argot",
"author_login": "msooseth",
"committed_at": "2026-05-12T14:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "226b8978ce7cf9de3972ca83954733a2338289b8",
"body": "Expect revert",
"is_bot": false,
"headline": "Merge pull request #1061 from argotorg/expectRevert",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-08T13:16:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a0cd2ac88303cf35fa4bc8977889089407954c0",
"body": null,
"is_bot": false,
"headline": "Fail noisily on missing expectRevert reverter",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-08T09:56:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0df4153ce4b7f40adb246c120af1930b6f5fa5de",
"body": null,
"is_bot": false,
"headline": "update changelog",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-06T17:11:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ce4cf371a2d4ec7c033ef84a202b5a6876dcd45",
"body": "distinguish reverter mismatch cases in matchExpectedRevert: SymAddr-vs-SymAddr\nnow returns Match/Mismatch on text equality, and the residual case becomes\ninternalError since only GVar remains.\n\nreword the two unsatisfied-expectation messages: \"expected call did not revert\"\nwhen the matching call returns successfully, and \"expected revert never\noccurred\" when the cheat scope exits without any matching call.",
"is_bot": false,
"headline": "clarify expectRevert error messages and reverter comparison",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-06T17:06:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e94f05a3d7ab3e1008f1eecdf76ef1cbcb1194dd",
"body": "fold consumeExpectedRevert and currentFrameIsCreate into the matching\nbranch of finishFrame and drop the SwallowKind ADT that existed only\nto glue the two functions. move poppingCheatFrame into a where helper\nsince finishFrame is its only caller.",
"is_bot": false,
"headline": "inline expectRevert boundary handling into finishFrame",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-06T16:19:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33d8beaddda105f8298810d2bf433ace7e9abd5c",
"body": "- OpRevert assigns expectedRevert.actualReverter = vm.state.contract\n first-wins. inlines and replaces the previous\n recordActualReverterIfFirst helper which skipped CREATE frames.\n- CREATE-frame reverts record the would-be-deployed address. CALL-frame\n reverts record the called contract.\n- found\n[…]\nall_wrapping_create_wrong_reverter (must fail);\n prove_expectRevertsCreate2WithReverter (uses CREATE2 for a\n deterministic expected address).\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "record innermost reverter at OpRevert",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-06T15:57:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c1f7bba1f6dabaa099c2fb9cdecafc81810f4cdb",
"body": "- decodeBuf [AbiStringType] reads the head offset in stripErrorPrefix;\n the previous hand-rolled skip assumed offset = 32\n- return Either String Bool. short-circuits on Right False so an\n indeterminate axis does not mask a known no-match\n- partial-prefix path reads first 4 bytes via Expr.readByte,\n[…]\nty\n is unsound under path constraints binding fresh names to literals\n- hoist errorMsg out of cheatActions; expectRevertFailureBuf reuses\n it\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "rewrite matchExpectedRevert",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-06T14:48:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "978f547072019878b4e54f7bd905a5f4c40ef026",
"body": "consumeExpectedRevert returned FrameReturned dummySuccessReturn\nfor matched CALL frames, routing through finishFrameNoExpectation's\nFrameReturned branch and skipping revertContracts and revertSubstate.\nstorage written by the reverted callee persisted past the swallow.\n\nnow returns FrameReverted dumm\n[…]\nwCall. the previous create-swallow path becomes SwallowCreate.\n\nadd prove_expectRevertCallRollsBackState (regression for the bug)\nand prove_expectRevertCreateRollsBackState (covers the create branch).",
"is_bot": false,
"headline": "roll back state on swallowed expectRevert CALL match",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-06T12:49:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8d4168747c2d8f6fb470a3ec4411b8fe89dff7cb",
"body": null,
"is_bot": false,
"headline": "bump foundry",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-06T10:39:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c522fed5cbacf4cd0c60162280aaff37b99f993",
"body": "finishFrame only fired the cheat-depth check on equality. an\nexpectation consumed by no sub-call silently passed when the test\nfunction popped above the cheat depth. add a strict-less-than\nbranch that emits an assertion-failure revert with forge's\n\"call didn't revert at a lower depth than cheatcode \n[…]\nage.\n\nextend pass and fail test coverage for double-set, no-subcall,\nbody-revert, empty-string, CREATE2, intermediate-cheat,\ndelegatecall, full-match-with-extra-args, and reverter-mismatch\nboundaries.",
"is_bot": false,
"headline": "fix unconsumed expectRevert and add boundary tests",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-05T23:09:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "36c3da3b49d1a8aec3578ab0f1d92e5a82aa4317",
"body": "cheat captures length vm.frames at call time. finishFrame consumes\nthe expectation when the frame at that depth pops and rewrites the\nframe result.\n\nCALL-frame matches turn into a return of 8192 zero bytes\n(dummySuccessReturn) so solidity's return-data decoders see a normal\nreturn.\n\nCREATE-frame mat\n[…]\nd the cheatcode\nreturn frame; first non-skipped FrameReverted wins. matches forge's\nbehaviour of recording reverted_by only on CALL boundaries.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "implement vm.expectRevert and vm.expectPartialRevert",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-05T21:45:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3f23cab6c04feed54d18c98ca90e48827b42abb1",
"body": "ports the positive test cases from foundry's\ntestdata/default/cheats/ExpectRevert.t.sol into\ntest/contracts/pass/expectRevert.sol and adds symbolic negative tests\nin test/contracts/fail/expectRevert.sol.\n\ncount overloads, _expectCheatcodeRevert, the precompile call test, and\nthe inline-assembly test\n[…]\ned.\n\nnegative tests use a symbolic argument so the failing branch produces a\ncounterexample rather than terminating with all-branches-reverted.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "add failing expectRevert tests",
"author_name": "dxo",
"author_login": "d-xo",
"committed_at": "2026-05-05T18:30:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3319f5a20dd46e755ea75e0a849f429d48679b24",
"body": "Support for hardhat/foundry console output",
"is_bot": false,
"headline": "Merge pull request #1050 from argotorg/dev-console",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-05-01T09:36:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e63be76ee8b6860f454275e758c5999debfb949",
"body": "When multiple workers hit RPC rate limits, requests now retry with\nexponential backoff (500ms-8s) and jitter. A shared cooldown IORef in\nSession coordinates workers so they back off together.\n\n- Add rpcThrottle field to Session\n- Add withRetry/fetchWithRetry wrapping fetchWithSession\n- Update all 4 \n[…]\nd) correctly\n- RPC-level errors (Left) pass through without retry\n- Debug logging gated behind conf.debug, matching existing style\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add RPC retry with exponential backoff and shared cooldown",
"author_name": "Rappie",
"author_login": "rappie",
"committed_at": "2026-04-30T18:23:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "efa6bb3960ca968486be2f4276fa9b7cffc7410b",
"body": "# Conflicts:\n#\ttest/EVM/Test/FoundryTests.hs",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into dev-console",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-30T16:31:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c7246abde60e0a9501281165a538f31becbedc2",
"body": null,
"is_bot": false,
"headline": "moved tests",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-30T16:28:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be079f50f5f5c22772d25cb001613b0c7dc1d719",
"body": "Use RPC key from github secrets",
"is_bot": false,
"headline": "Merge pull request #1060 from argotorg/dev-secret-rpc-key",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-30T16:14:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "110459d71ba8271fc495e5dd213484c47d0ba908",
"body": null,
"is_bot": false,
"headline": "remove unsafePerformIO",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-30T15:11:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ef6ab161f3f2740bf965d50b608def3d96d9b53",
"body": null,
"is_bot": false,
"headline": "use RPC key from github secrets",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-30T15:04:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50cc9081a5eae8dcdcd40d914be9dee3dbb77bfd",
"body": "Parse correctly enumerated types",
"is_bot": false,
"headline": "Merge pull request #1055 from argotorg/fix-enumerated-types",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-30T11:30:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "febe4f3dee2c964c432aff262c88d38f54c84cb6",
"body": "fix for issue #895: source not found for Panic traces",
"is_bot": false,
"headline": "Merge pull request #1056 from argotorg/fix-panic-srcmap",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-04-22T19:42:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da78a8fc98f1a6ab0fe4beea3d5d7c3075b6d9be",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into fix-panic-srcmap",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-04-22T12:20:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1d831aef312223138ea7e727bdbe3437913c2f7",
"body": "The test contract files were not tracked in git, causing CI failures\nsince the Nix build only includes git-tracked files.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "add missing Solidity test fixtures for assertApproxEqAbs",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-02T17:49:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "83270e5e6b2febb647389caf2a852cbd7d3d011b",
"body": null,
"is_bot": false,
"headline": "added tests for assertApproxEqAbs",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-02T17:49:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1814c5b40b292f7525bf9ae87abf744a6e3d71b4",
"body": null,
"is_bot": false,
"headline": "added two variants of assertApproxEqAbs",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-02T17:49:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce088b8f7c5ba4887fa6b08042793e8072511928",
"body": null,
"is_bot": false,
"headline": "fixes",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-02T17:49:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3848055046de4359e1d1e463ef37b3560e355d23",
"body": "Added two variants of assertApproxEqAbs",
"is_bot": false,
"headline": "Merge pull request #1054 from argotorg/dev-missing-cheatcodes",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-04-02T13:17:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5d65fafb7517d34a6bdadebab456dd76fa21492",
"body": null,
"is_bot": false,
"headline": "fix for issue #895: source not found for Panic traces",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-02T11:25:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "204640e104894a31a1e593ce31c2819e0eed6f07",
"body": "EXTCODESIZE now returns 1 for the console address (matching cheatCode\nbehavior), so contracts that check code size before calling won't\nskip the console.log call. Added 8 new tests covering EXTCODESIZE,\nformat decoding (bool, address, no-args, unknown selector, short\ninput), return value correctness, and multiple console.log calls.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix EXTCODESIZE for console.log addr, add tests and changelog",
"author_name": "Mate Soos",
"author_login": "msooseth",
"committed_at": "2026-04-02T09:57:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "afca5153e2072d437b7fcf33f1d47a3ba31398dd",
"body": null,
"is_bot": false,
"headline": "parse correctly enumerated types",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-04-02T08:44:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adf1279a55f9027e3bbd5617bc60c3ec42ddc755",
"body": "The test contract files were not tracked in git, causing CI failures\nsince the Nix build only includes git-tracked files.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "add missing Solidity test fixtures for assertApproxEqAbs",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-03-31T13:26:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dafbb6b8d99a1cd2b5bc6f53dc4848487c7ea706",
"body": null,
"is_bot": false,
"headline": "added tests for assertApproxEqAbs",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-03-31T11:41:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5220de210b52355045668521636b1a84745a85d0",
"body": null,
"is_bot": false,
"headline": "added two variants of assertApproxEqAbs",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-03-31T11:18:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9de9d622a2082e39f2d7cb7e9b954c61eaddd9ce",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin' into dev-console",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-03-31T10:54:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "123fc8af7190975605b62f5f9464996ca1b7f768",
"body": "libff: fix header installation with CMake 4.3+",
"is_bot": false,
"headline": "Merge pull request #1053 from argotorg/fix-libff",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-03-31T07:21:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d35903e9e10349abfdef20c81a519344d8d2abc",
"body": null,
"is_bot": false,
"headline": "libff: fix header installation with CMake 4.3+",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-03-30T20:27:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35ea7a56a3ffa84f4f6a86a4b45b2e72dc964945",
"body": null,
"is_bot": false,
"headline": "fix tests",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-03-26T21:00:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7745ffdaba26cd8d8b6b073cd8ba0e50a075cf80",
"body": null,
"is_bot": false,
"headline": "console tests",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-03-26T20:34:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11c8e391cbd92bfbb66c8e6460f6e52b99d62d1c",
"body": null,
"is_bot": false,
"headline": "added support for hardhat/foundry console output",
"author_name": "gustavo-grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-03-26T19:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8da7ea44ebf5524dce65b14e70cee1a4413eb6f0",
"body": "* EVM: inline getOp for execution speedup\n\nAdding {-# INLINE getOp #-} enables GHC's case-of-case transformation,\neliminating the intermediate GenericOp constructor allocation in opcode\ndispatch. This also lets GHC sink expensive thunks (contract lookups,\nfee schedule fields) into only the opcode br\n[…]\n deprecation warning\n\nAdd doBenchmark = true to shellFor so that benchmark dependencies\n(tasty-bench) are available in nix develop without cabal update.\nReplace deprecated testTarget with testTargets.",
"is_bot": false,
"headline": "EVM: inline getOp for execution speedup (#1043)",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-03-12T16:51:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2baa2646ef5dcacd49f72565b326105295d458d6",
"body": "EVM execution is single-threaded. With -N (auto-detect), GHC creates one\ncapability per core, each with a 32MB nursery. The extra capabilities add\nGC synchronization overhead without benefit since only one is used.\n\nAlso adds -rtsopts so RTS parameters can be overridden at runtime.",
"is_bot": false,
"headline": "bench-perf: use -N1 for single-threaded EVM benchmarks",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-03-09T14:12:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10093e18cbe9f6b92bf9ec6aa3f249c248cd521a",
"body": "hevm's execution model allocates heavily in the GC nursery (gen0) due\nto immutable record reconstruction on every EVM step. All allocations\nare short-lived and never survive to gen1. The default 4MB nursery\ncauses excessive minor GC pauses.\n\nSetting -A32m reduces GC frequency dramatically, yielding significant\nspeedups across all benchmarks.",
"is_bot": false,
"headline": "cabal: increase GHC nursery size to 32MB for allocation-heavy workloads",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-03-09T14:12:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bc0305e27edb223746ebdb27636ba3b8a176922",
"body": "EVM: optimize OpSwap to use direct list manipulation",
"is_bot": false,
"headline": "Merge pull request #1044 from argotorg/perf-swap",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-03-09T14:05:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ba39e9087cf518553dced78025627eb3d0de705",
"body": "From @blishko's suggestion",
"is_bot": false,
"headline": "EVM: more compact OpSwap",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-03-09T13:26:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "436ef08d8afc7c951de54fc9f9bb28fdeae32cb1",
"body": "Co-authored-by: Emilio López <emilio.lopez@trailofbits.com>",
"is_bot": false,
"headline": "Echidna compatibility check as a Github Action (#1039)",
"author_name": "Gustavo Grieco",
"author_login": "gustavo-grieco",
"committed_at": "2026-03-09T12:20:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9d8d5a85e82cd67ca3703d9ea18cc7dc2eda013",
"body": "Also fix check-dependencies to reference the correct nixpkgs node in\nflake.lock (was pointing at a duplicate instead of root nixpkgs).",
"is_bot": false,
"headline": "nix: deduplicate flake inputs with follows",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-03-07T21:42:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97a83e2eda5c2290996c3713b3f3c72a4f41346f",
"body": null,
"is_bot": false,
"headline": "ci: check-dependencies: add go-ethereum dependency check",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-03-07T21:42:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "182649c7dd1323b9152edc972df048f1aed3c878",
"body": "Replace optics-based ix/zoom swap with direct splitAt-based list swap.\nThe old code used two ix traversals + zoom + two .= assignments.\nThe new code uses a single splitAt + list construction.\n\nbench-perf shows a ∼10% reduction in primes and loop",
"is_bot": false,
"headline": "EVM: optimize OpSwap to use direct list manipulation",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-03-07T20:40:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed90053fa0ed69e658a75ab0ed64d467f5a5448d",
"body": null,
"is_bot": false,
"headline": "Test: Disallow FFI in forge tests by default",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-03-02T12:14:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98a088c452a800b8e0d60e9fa52c67c01182c5dc",
"body": "Previously, in some cases we had a hardcoded filter for prefix \"prove\",\neven though these cases had test methods that used different prefix.\nHere we match the expected prefix for such cases.",
"is_bot": false,
"headline": "Test: Run all expected test methods in Foundry tests",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-27T14:27:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f7efc387cfdb470029a44d3802d1ec33042aa59",
"body": "It is a strict subset of Constantinople test. We don't need to check\nthe same thing twice.",
"is_bot": false,
"headline": "Test: Remove ConstantinopleMin test",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-27T14:27:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6f4454f5423bab54aa488c9853813da53446329",
"body": "We can now correctly execute this test even if the method does not have\n\"prove\" prefix.",
"is_bot": false,
"headline": "Test: Re-enable previously disabled test",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-27T14:27:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "390d10227671607a11777094b0d86f17bf2aa5d4",
"body": null,
"is_bot": false,
"headline": "Unit tests: Generalize the way to filter unit test methods",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-27T14:27:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebc576e0deedb056305d885340a96a69180319b2",
"body": "Function selection in our foundry tests do not work correctly at the\nmoment. The problem is that prefix \"prove\" is currently hardcoded as\npart of the filtering process when selecting functions to test in a\ncontract.\nWe demonstrate the problem by changing the name of a function in a test\nwhere an ass\n[…]\n ignored by the test and the test\ncase reports no counterexamples, which is incorrect.\n\nWe disable the test after the update, to keep the test suite passing.\nEnable to observe the incorrect behaviour.",
"is_bot": false,
"headline": "Test: Demonstrate a problem in function selection in Foundry tests",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-26T17:40:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c536f66a46aea87815eaadea6433d6df0da1d6e",
"body": null,
"is_bot": false,
"headline": "Test: Move Foundry tests to a dedicated module",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-26T17:04:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5090f8fb350da24cd0ac4a048ec45fc2cf2c7db",
"body": null,
"is_bot": false,
"headline": "Expr: Make Expr exports explicit",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-25T12:36:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb6062dbcce2339122fdbde54f29bcdb88f47c76",
"body": "`readWordFromBytes` is intended to be an internal helper method",
"is_bot": false,
"headline": "Expr: Do not use `readWordFromBytes` outside of Expr module",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-24T19:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5cd54e3574c88d105a3266f258f7fe1afcd8adb",
"body": "Calldata load should return zero when reading past the buffer.\nWe can force this in concrete mode.\nFor symbolic mode, we currently rely on `Expr.readWord` which has\nwrap-around semantics.",
"is_bot": false,
"headline": "EVM: Document better semantic difference in CALLDATALOAD",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-24T17:18:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77447b3b6fcafd21eee5a134be7ef82ade91f44a",
"body": null,
"is_bot": false,
"headline": "Expr: Implement wrap-around semantics for readWordFromBytes",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-24T14:25:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7a31beaea6b9d40af511d0c54ff869ead189c38",
"body": "It seems that reading past call data should always return 0.\nPreviously, we would handle call data load with Expr.readWord, which,\nhowever, has wrap-around semantics. For this reason we would get\nconflicts with geth execution traces on corner-case random contracts.\n\nWe add a special handler for the concrete case to enforce consistency\nwith geth implementation.\nWe already have similar special handler for reading from memory, in\n`readMemory`, which is called when handling MLOAD.",
"is_bot": false,
"headline": "EVM: Add special treatment for CALLDATALOAD",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-24T14:21:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d956fc15274b9625494c603a59af751646d6b17",
"body": "This is just a cleanup after adding tests for bugs in simplifier\nregarding overflow/wrapping behaviour and fixing those bugs.",
"is_bot": false,
"headline": "Expr: Small cleanup in comments and guard",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-23T15:49:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96d3fd1828cee6f3f6e8a8090574055a88b2a91b",
"body": "…ifier\n\nAdd 9 unit tests documenting the edge cases fixed in c4d33256, covering\nreadByte/readWord CopySlice before/after-region guards, readWordFromBytes\nidx+31 wrapping, and copySlice concrete srcOffset wrapping. Each test\nconstructs a specific expression near maxBound and verifies the simplified\nresult is semantically equivalent to the original via SMT.",
"is_bot": false,
"headline": "Test: Add regression tests for W256 wrapping bugs in expression simpl…",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-02-23T15:19:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4d33256d183bb13288c50738dbaa14984e3ec9b",
"body": "The expression simplifier had several locations where 256-bit unsigned\ninteger wrapping was not handled, causing incorrect simplifications\nthat the SMT solver could distinguish from the original expressions.\nThis manifested as intermittent QuickCheck failures in\nsimplify-joinbytes and simplifyProp-e\n[…]\nbstract-src case already had this\n guard but the concrete-concrete case did not.\n\n Fix: add the same `srcOffset + (size-1) >= srcOffset` overflow\n guard already present in the abstract-src case.",
"is_bot": false,
"headline": "Expr: Fix unsigned wrapping bugs in expression simplifier",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-02-23T12:27:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6544ab55832624a9403ef07bbb06e5319fea1c73",
"body": null,
"is_bot": false,
"headline": "Source code lines displayed during state merging (#1033)",
"author_name": "Mate Soos @ Argot",
"author_login": "msooseth",
"committed_at": "2026-02-23T10:27:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e4c8262e1f196d70d825812dfef505eb8baad83",
"body": "Some of the tests are disabled for now, because we can't solve them fast\nenough (or at all) at the moment.",
"is_bot": false,
"headline": "Test: Add tests for div and mod operations",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-19T13:49:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f9ab4a6460698933bdfdaa76416001391d7ebee",
"body": "Add floor gas enforcement in finalize following EIP-7623. Fix gasTryFrom\nto cap overflows at Word64 maxBound instead of erroring. Add EIP-7825 max\ntransaction gas limit validation in test harness. Unskip tests now passing.",
"is_bot": false,
"headline": "EVM: implement EIP-7623 calldata floor gas and EIP-7825 max TX gas limit",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-02-19T11:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9d5762d648b6622d0bf91aadd97a32070ad5007",
"body": "Fix parseModexpLength slice sizes. Add EIP-7823 validation: reject ModExp\ninputs exceeding 1024 bytes with precompileFail. Rewrite concreteModexpGasFee\nwith overflow-safe arithmetic and EIP-7823 limit checks.",
"is_bot": false,
"headline": "EVM: implement EIP-7823 ModExp upper bounds and EIP-7883 gas increase",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-02-19T11:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca75e057f2493b67299cec6839322947ac84be96",
"body": null,
"is_bot": false,
"headline": "Test: Move more symbolic execution tests",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-17T16:10:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d6a8e834e8fcf709967bebaa5288cee924edc99",
"body": null,
"is_bot": false,
"headline": "Test: Move more tests to dedicated module",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-17T12:32:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9330f594e75a4769de1f6ff271c2119dc0d707ee",
"body": "Instead of using `expectFailure` on two tests, we are going to disable\nthem.\nThese cover the case where we are accessing an array with a symbolic\nindex. We are not able to simplify the load-over-store expression in\nthis case purely by looking at the expression. We would need to take\nadditional infor\n[…]\nonstraints into account.\nTherefore the idea expressed by these tests would be nice-to-have, but\nwe don't have it right now.\n\nOn the other hand, there was one ignored test that can actually be\nenabled.",
"is_bot": false,
"headline": "Test: Small cleanup in storage tests",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-17T12:32:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4259e8fe5fc5a1c10b52ac939c51dea6a9e469cd",
"body": null,
"is_bot": false,
"headline": "ci: windows: only extract blockchain_tests",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-02-17T12:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2f4c4330367f1d7be9b76d04cb982be641ec529",
"body": "This reduces the on-disk size from about 8GB to around 3GB",
"is_bot": false,
"headline": "flake: keep only part of the execution spec test fixture",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-02-17T12:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2340a20739a65441301ec17a972e29702d16b1e2",
"body": "Closes #1016",
"is_bot": false,
"headline": "Compare solidity repo and solc versions between CI jobs",
"author_name": "Emilio López",
"author_login": "elopez",
"committed_at": "2026-02-17T08:48:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "408632774c522de4396b8bd78e11a13024dcdca5",
"body": "In equivalence checking, when comparing two branches, we can dump the\nend states to a file.\nThe information about the end state is collected as (Set Prop, String),\nwhere the first entry represents the some conditions under which the end\nstates are different and the second entry is the formatted Expr\n[…]\n:\n```\nghci> let s :: String = \"hello\\nworld\"\nghci> putStrLn s\nhello\nworld\nghci> putStrLn (show s)\n\"hello\\nworld\"\n```\n\nThe fix is to call `show` only on the first entry and keep the second\nentry as is.",
"is_bot": false,
"headline": "SymExec: Fix dumping formatted expression to file",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-16T15:39:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "82378361a9525e3b1c3591c1b99a06153e8b825b",
"body": null,
"is_bot": false,
"headline": "Test: Move more tests to dedicated modules",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-16T12:34:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8e6044f977ae62d0c0a3a29e9f4bfc801dea5b1",
"body": "When comparing hevm and evm runs on random benchmarks, only print out\ninformation if the behaviour does not match or if verbose output is\nexplicitly requested.",
"is_bot": false,
"headline": "Test: Less verbose test runs",
"author_name": "blishko",
"author_login": "blishko",
"committed_at": "2026-02-12T16:36:38Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 17,
"commits_last_year": 509,
"latest_release_at": "2026-06-29T12:37:19Z",
"latest_release_tag": "release/0.58.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 41,
"days_since_latest_release": 22,
"mean_days_between_releases": 124.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 79,
"stars": 353,
"watchers": 8,
"fork_history": {
"days": [
{
"date": "2022-08-31",
"count": 1
},
{
"date": "2022-09-05",
"count": 1
},
{
"date": "2022-12-19",
"count": 1
},
{
"date": "2023-01-11",
"count": 1
},
{
"date": "2023-01-23",
"count": 2
},
{
"date": "2023-01-30",
"count": 1
},
{
"date": "2023-02-03",
"count": 1
},
{
"date": "2023-02-04",
"count": 1
},
{
"date": "2023-02-16",
"count": 1
},
{
"date": "2023-03-10",
"count": 1
},
{
"date": "2023-04-07",
"count": 1
},
{
"date": "2023-04-13",
"count": 1
},
{
"date": "2023-05-06",
"count": 1
},
{
"date": "2023-05-10",
"count": 1
},
{
"date": "2023-06-13",
"count": 1
},
{
"date": "2023-06-19",
"count": 1
},
{
"date": "2023-06-25",
"count": 1
},
{
"date": "2023-07-11",
"count": 1
},
{
"date": "2023-07-24",
"count": 1
},
{
"date": "2023-07-26",
"count": 1
},
{
"date": "2023-08-08",
"count": 1
},
{
"date": "2023-08-10",
"count": 1
},
{
"date": "2023-09-13",
"count": 1
},
{
"date": "2023-10-02",
"count": 1
},
{
"date": "2023-10-04",
"count": 1
},
{
"date": "2023-10-06",
"count": 1
},
{
"date": "2023-10-09",
"count": 1
},
{
"date": "2023-10-17",
"count": 1
},
{
"date": "2023-11-08",
"count": 2
},
{
"date": "2023-12-10",
"count": 1
},
{
"date": "2023-12-18",
"count": 1
},
{
"date": "2024-01-16",
"count": 1
},
{
"date": "2024-02-10",
"count": 1
},
{
"date": "2024-02-29",
"count": 1
},
{
"date": "2024-03-07",
"count": 1
},
{
"date": "2024-03-23",
"count": 1
},
{
"date": "2024-03-25",
"count": 1
},
{
"date": "2024-04-27",
"count": 1
},
{
"date": "2024-04-29",
"count": 1
},
{
"date": "2024-05-14",
"count": 1
},
{
"date": "2024-05-21",
"count": 1
},
{
"date": "2024-05-29",
"count": 1
},
{
"date": "2024-07-07",
"count": 1
},
{
"date": "2024-08-20",
"count": 1
},
{
"date": "2024-12-23",
"count": 1
},
{
"date": "2024-12-26",
"count": 1
},
{
"date": "2025-02-13",
"count": 1
},
{
"date": "2025-02-14",
"count": 1
},
{
"date": "2025-03-09",
"count": 1
},
{
"date": "2025-03-13",
"count": 1
},
{
"date": "2025-03-17",
"count": 1
},
{
"date": "2025-03-18",
"count": 1
},
{
"date": "2025-04-03",
"count": 1
},
{
"date": "2025-04-05",
"count": 1
},
{
"date": "2025-04-25",
"count": 1
},
{
"date": "2025-04-27",
"count": 1
},
{
"date": "2025-05-01",
"count": 1
},
{
"date": "2025-05-11",
"count": 1
},
{
"date": "2025-05-19",
"count": 1
},
{
"date": "2025-07-11",
"count": 1
},
{
"date": "2025-08-10",
"count": 1
},
{
"date": "2025-09-04",
"count": 1
},
{
"date": "2025-09-05",
"count": 1
},
{
"date": "2025-10-05",
"count": 1
},
{
"date": "2025-11-04",
"count": 1
},
{
"date": "2025-11-16",
"count": 1
},
{
"date": "2025-11-21",
"count": 1
},
{
"date": "2025-12-24",
"count": 1
},
{
"date": "2026-01-23",
"count": 1
},
{
"date": "2026-01-24",
"count": 1
},
{
"date": "2026-02-09",
"count": 1
},
{
"date": "2026-02-12",
"count": 1
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-04-05",
"count": 1
},
{
"date": "2026-04-11",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
}
],
"complete": true,
"collected": 79,
"total_forks": 79
},
"star_history": {
"days": [
{
"date": "2022-08-29",
"count": 2
},
{
"date": "2022-08-30",
"count": 4
},
{
"date": "2022-08-31",
"count": 12
},
{
"date": "2022-09-01",
"count": 5
},
{
"date": "2022-09-02",
"count": 2
},
{
"date": "2022-09-03",
"count": 1
},
{
"date": "2022-09-04",
"count": 1
},
{
"date": "2022-09-06",
"count": 2
},
{
"date": "2022-09-07",
"count": 1
},
{
"date": "2022-09-14",
"count": 2
},
{
"date": "2022-09-28",
"count": 1
},
{
"date": "2022-10-11",
"count": 1
},
{
"date": "2022-10-18",
"count": 1
},
{
"date": "2022-10-19",
"count": 1
},
{
"date": "2022-10-26",
"count": 1
},
{
"date": "2022-11-01",
"count": 1
},
{
"date": "2022-11-09",
"count": 2
},
{
"date": "2022-11-23",
"count": 2
},
{
"date": "2022-11-24",
"count": 1
},
{
"date": "2022-11-25",
"count": 1
},
{
"date": "2022-11-29",
"count": 3
},
{
"date": "2022-11-30",
"count": 1
},
{
"date": "2022-12-06",
"count": 1
},
{
"date": "2022-12-07",
"count": 1
},
{
"date": "2022-12-09",
"count": 1
},
{
"date": "2022-12-15",
"count": 2
},
{
"date": "2022-12-16",
"count": 1
},
{
"date": "2022-12-17",
"count": 1
},
{
"date": "2022-12-20",
"count": 1
},
{
"date": "2023-01-01",
"count": 1
},
{
"date": "2023-01-03",
"count": 2
},
{
"date": "2023-01-04",
"count": 3
},
{
"date": "2023-01-05",
"count": 3
},
{
"date": "2023-01-06",
"count": 2
},
{
"date": "2023-01-10",
"count": 1
},
{
"date": "2023-01-11",
"count": 1
},
{
"date": "2023-01-12",
"count": 1
},
{
"date": "2023-01-15",
"count": 1
},
{
"date": "2023-01-17",
"count": 1
},
{
"date": "2023-01-18",
"count": 1
},
{
"date": "2023-01-23",
"count": 10
},
{
"date": "2023-01-24",
"count": 6
},
{
"date": "2023-01-25",
"count": 1
},
{
"date": "2023-01-26",
"count": 3
},
{
"date": "2023-01-27",
"count": 3
},
{
"date": "2023-01-28",
"count": 2
},
{
"date": "2023-01-31",
"count": 4
},
{
"date": "2023-02-02",
"count": 1
},
{
"date": "2023-02-03",
"count": 2
},
{
"date": "2023-02-06",
"count": 1
},
{
"date": "2023-02-14",
"count": 1
},
{
"date": "2023-02-18",
"count": 1
},
{
"date": "2023-03-01",
"count": 1
},
{
"date": "2023-03-23",
"count": 1
},
{
"date": "2023-03-25",
"count": 2
},
{
"date": "2023-03-27",
"count": 1
},
{
"date": "2023-03-29",
"count": 1
},
{
"date": "2023-03-30",
"count": 1
},
{
"date": "2023-04-04",
"count": 1
},
{
"date": "2023-04-05",
"count": 2
},
{
"date": "2023-04-09",
"count": 1
},
{
"date": "2023-04-20",
"count": 1
},
{
"date": "2023-04-25",
"count": 1
},
{
"date": "2023-04-26",
"count": 1
},
{
"date": "2023-05-01",
"count": 1
},
{
"date": "2023-05-03",
"count": 1
},
{
"date": "2023-05-06",
"count": 1
},
{
"date": "2023-05-07",
"count": 1
},
{
"date": "2023-05-10",
"count": 1
},
{
"date": "2023-05-15",
"count": 1
},
{
"date": "2023-05-18",
"count": 2
},
{
"date": "2023-05-23",
"count": 1
},
{
"date": "2023-05-26",
"count": 1
},
{
"date": "2023-05-31",
"count": 1
},
{
"date": "2023-06-12",
"count": 1
},
{
"date": "2023-06-21",
"count": 1
},
{
"date": "2023-07-04",
"count": 1
},
{
"date": "2023-07-08",
"count": 1
},
{
"date": "2023-07-11",
"count": 1
},
{
"date": "2023-07-13",
"count": 1
},
{
"date": "2023-07-16",
"count": 3
},
{
"date": "2023-07-17",
"count": 1
},
{
"date": "2023-07-18",
"count": 1
},
{
"date": "2023-07-22",
"count": 1
},
{
"date": "2023-08-03",
"count": 1
},
{
"date": "2023-08-06",
"count": 1
},
{
"date": "2023-08-07",
"count": 2
},
{
"date": "2023-08-09",
"count": 1
},
{
"date": "2023-08-19",
"count": 2
},
{
"date": "2023-08-24",
"count": 1
},
{
"date": "2023-08-25",
"count": 1
},
{
"date": "2023-09-13",
"count": 1
},
{
"date": "2023-09-14",
"count": 1
},
{
"date": "2023-09-16",
"count": 1
},
{
"date": "2023-09-17",
"count": 1
},
{
"date": "2023-09-23",
"count": 1
},
{
"date": "2023-09-24",
"count": 1
},
{
"date": "2023-09-27",
"count": 1
},
{
"date": "2023-10-06",
"count": 1
},
{
"date": "2023-10-09",
"count": 1
},
{
"date": "2023-10-16",
"count": 1
},
{
"date": "2023-10-21",
"count": 1
},
{
"date": "2023-10-22",
"count": 1
},
{
"date": "2023-11-02",
"count": 1
},
{
"date": "2023-11-04",
"count": 1
},
{
"date": "2023-11-13",
"count": 1
},
{
"date": "2023-11-20",
"count": 1
},
{
"date": "2023-11-25",
"count": 1
},
{
"date": "2023-11-26",
"count": 1
},
{
"date": "2023-11-29",
"count": 1
},
{
"date": "2023-12-09",
"count": 2
},
{
"date": "2023-12-10",
"count": 2
},
{
"date": "2023-12-11",
"count": 1
},
{
"date": "2023-12-12",
"count": 1
},
{
"date": "2023-12-16",
"count": 1
},
{
"date": "2023-12-21",
"count": 1
},
{
"date": "2023-12-22",
"count": 1
},
{
"date": "2024-01-06",
"count": 1
},
{
"date": "2024-01-07",
"count": 1
},
{
"date": "2024-01-08",
"count": 1
},
{
"date": "2024-01-09",
"count": 1
},
{
"date": "2024-01-13",
"count": 1
},
{
"date": "2024-01-14",
"count": 1
},
{
"date": "2024-01-16",
"count": 2
},
{
"date": "2024-01-18",
"count": 2
},
{
"date": "2024-01-27",
"count": 1
},
{
"date": "2024-02-03",
"count": 1
},
{
"date": "2024-02-10",
"count": 1
},
{
"date": "2024-02-29",
"count": 2
},
{
"date": "2024-03-12",
"count": 1
},
{
"date": "2024-03-21",
"count": 1
},
{
"date": "2024-03-23",
"count": 2
},
{
"date": "2024-03-29",
"count": 1
},
{
"date": "2024-04-09",
"count": 1
},
{
"date": "2024-04-10",
"count": 1
},
{
"date": "2024-04-15",
"count": 1
},
{
"date": "2024-04-27",
"count": 1
},
{
"date": "2024-04-29",
"count": 1
},
{
"date": "2024-05-03",
"count": 1
},
{
"date": "2024-05-07",
"count": 1
},
{
"date": "2024-05-13",
"count": 1
},
{
"date": "2024-05-22",
"count": 1
},
{
"date": "2024-05-24",
"count": 1
},
{
"date": "2024-05-29",
"count": 1
},
{
"date": "2024-06-05",
"count": 1
},
{
"date": "2024-06-07",
"count": 1
},
{
"date": "2024-06-21",
"count": 1
},
{
"date": "2024-06-27",
"count": 1
},
{
"date": "2024-07-06",
"count": 1
},
{
"date": "2024-07-08",
"count": 1
},
{
"date": "2024-08-06",
"count": 1
},
{
"date": "2024-08-07",
"count": 1
},
{
"date": "2024-08-09",
"count": 1
},
{
"date": "2024-08-21",
"count": 1
},
{
"date": "2024-08-27",
"count": 1
},
{
"date": "2024-09-14",
"count": 1
},
{
"date": "2024-10-04",
"count": 1
},
{
"date": "2024-10-14",
"count": 1
},
{
"date": "2024-10-22",
"count": 1
},
{
"date": "2024-10-30",
"count": 2
},
{
"date": "2024-10-31",
"count": 3
},
{
"date": "2024-11-13",
"count": 1
},
{
"date": "2024-11-14",
"count": 1
},
{
"date": "2024-11-17",
"count": 1
},
{
"date": "2024-11-28",
"count": 1
},
{
"date": "2024-11-29",
"count": 2
},
{
"date": "2024-12-03",
"count": 1
},
{
"date": "2024-12-06",
"count": 1
},
{
"date": "2024-12-11",
"count": 1
},
{
"date": "2024-12-17",
"count": 1
},
{
"date": "2024-12-20",
"count": 1
},
{
"date": "2024-12-25",
"count": 1
},
{
"date": "2024-12-28",
"count": 1
},
{
"date": "2025-01-03",
"count": 1
},
{
"date": "2025-01-06",
"count": 1
},
{
"date": "2025-01-10",
"count": 1
},
{
"date": "2025-01-24",
"count": 1
},
{
"date": "2025-01-29",
"count": 1
},
{
"date": "2025-02-02",
"count": 1
},
{
"date": "2025-02-04",
"count": 1
},
{
"date": "2025-02-06",
"count": 2
},
{
"date": "2025-02-09",
"count": 1
},
{
"date": "2025-02-13",
"count": 1
},
{
"date": "2025-02-19",
"count": 1
},
{
"date": "2025-02-22",
"count": 1
},
{
"date": "2025-02-24",
"count": 1
},
{
"date": "2025-02-25",
"count": 1
},
{
"date": "2025-02-26",
"count": 1
},
{
"date": "2025-02-28",
"count": 1
},
{
"date": "2025-03-13",
"count": 1
},
{
"date": "2025-03-17",
"count": 2
},
{
"date": "2025-03-18",
"count": 1
},
{
"date": "2025-03-27",
"count": 1
},
{
"date": "2025-03-31",
"count": 2
},
{
"date": "2025-04-09",
"count": 1
},
{
"date": "2025-04-23",
"count": 1
},
{
"date": "2025-04-24",
"count": 1
},
{
"date": "2025-04-26",
"count": 1
},
{
"date": "2025-05-06",
"count": 1
},
{
"date": "2025-05-10",
"count": 1
},
{
"date": "2025-05-14",
"count": 1
},
{
"date": "2025-05-19",
"count": 1
},
{
"date": "2025-05-20",
"count": 1
},
{
"date": "2025-05-22",
"count": 1
},
{
"date": "2025-05-26",
"count": 1
},
{
"date": "2025-05-27",
"count": 1
},
{
"date": "2025-05-31",
"count": 1
},
{
"date": "2025-06-06",
"count": 1
},
{
"date": "2025-06-23",
"count": 1
},
{
"date": "2025-06-24",
"count": 2
},
{
"date": "2025-06-27",
"count": 1
},
{
"date": "2025-06-28",
"count": 1
},
{
"date": "2025-07-01",
"count": 1
},
{
"date": "2025-07-02",
"count": 2
},
{
"date": "2025-07-03",
"count": 1
},
{
"date": "2025-07-08",
"count": 1
},
{
"date": "2025-07-22",
"count": 2
},
{
"date": "2025-07-23",
"count": 2
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-07-31",
"count": 1
},
{
"date": "2025-08-12",
"count": 2
},
{
"date": "2025-08-21",
"count": 1
},
{
"date": "2025-09-12",
"count": 1
},
{
"date": "2025-09-14",
"count": 1
},
{
"date": "2025-09-15",
"count": 2
},
{
"date": "2025-09-16",
"count": 2
},
{
"date": "2025-09-18",
"count": 1
},
{
"date": "2025-09-28",
"count": 1
},
{
"date": "2025-10-25",
"count": 1
},
{
"date": "2025-11-16",
"count": 1
},
{
"date": "2025-11-19",
"count": 1
},
{
"date": "2025-11-25",
"count": 1
},
{
"date": "2025-12-02",
"count": 1
},
{
"date": "2025-12-04",
"count": 1
},
{
"date": "2025-12-19",
"count": 1
},
{
"date": "2025-12-21",
"count": 1
},
{
"date": "2025-12-24",
"count": 1
},
{
"date": "2026-01-04",
"count": 1
},
{
"date": "2026-01-06",
"count": 1
},
{
"date": "2026-01-13",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-01-22",
"count": 1
},
{
"date": "2026-01-30",
"count": 1
},
{
"date": "2026-02-11",
"count": 1
},
{
"date": "2026-02-21",
"count": 1
},
{
"date": "2026-02-27",
"count": 1
},
{
"date": "2026-03-17",
"count": 1
},
{
"date": "2026-03-22",
"count": 1
},
{
"date": "2026-03-25",
"count": 1
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-04-03",
"count": 1
},
{
"date": "2026-04-16",
"count": 1
},
{
"date": "2026-04-20",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-16",
"count": 1
},
{
"date": "2026-05-18",
"count": 1
},
{
"date": "2026-06-06",
"count": 1
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-06-23",
"count": 1
},
{
"date": "2026-06-27",
"count": 1
},
{
"date": "2026-06-29",
"count": 1
},
{
"date": "2026-06-30",
"count": 2
},
{
"date": "2026-07-01",
"count": 2
},
{
"date": "2026-07-09",
"count": 1
},
{
"date": "2026-07-11",
"count": 1
},
{
"date": "2026-07-12",
"count": 1
},
{
"date": "2026-07-21",
"count": 1
}
],
"complete": true,
"collected": 353,
"total_stars": 353
},
"open_issues_and_prs": 62
},
"ai_readiness": {
"has_nix": true,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 2509240,
"source_files_sampled": 15,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"doc/package.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "0.0.0-20210322153248-0c34fe9e7dc2",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 10,
"advisory_ids": [
"GHSA-45gg-vh54-h5m9",
"GHSA-45x7-px36-x8w8",
"GHSA-5cgq-3rg8-m6cv",
"GHSA-78mq-xcr3-xm33",
"GHSA-89gr-r52h-f8rx",
"GHSA-8c26-wmh5-6g9v",
"GHSA-9m57-25v3-79x9",
"GHSA-f5wc-c3c7-36mc",
"GHSA-f6x5-jh6r-wrfv",
"GHSA-gwc9-m7rh-j2ww"
],
"fixed_version": "3.4.0",
"advisory_count": 43,
"oldest_advisory_days": 1585
},
{
"name": "base-x",
"direct": false,
"version": "3.0.9",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-xq7p-g2vc-g82p"
],
"fixed_version": "5.0.1",
"advisory_count": 1,
"oldest_advisory_days": 447
},
{
"name": "github.com/ethereum/go-ethereum",
"direct": false,
"version": "1.10.6",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-2gjw-fg97-vg3r",
"GHSA-4xc9-8hmq-j652",
"GHSA-59hh-656j-3p7v",
"GHSA-5m8f-chrv-7rw5",
"GHSA-689v-6xwf-5jf3",
"GHSA-9856-9gg9-qcmq",
"GHSA-m6j8-rg6r-7mv8",
"GHSA-mq3p-rrmp-79jg",
"GHSA-mr7q-c9w9-wh4h",
"GHSA-ppjg-v974-84cm"
],
"fixed_version": "1.17.0",
"advisory_count": 26,
"oldest_advisory_days": 1786
},
{
"name": "js-yaml",
"direct": false,
"version": "4.1.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-52cp-r559-cp3m",
"GHSA-h67p-54hq-rp68",
"GHSA-mh29-5h37-fv8m"
],
"fixed_version": "4.3.0",
"advisory_count": 3,
"oldest_advisory_days": 249
},
{
"name": "msgpackr",
"direct": false,
"version": "1.8.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 8.6,
"advisory_ids": [
"GHSA-7hpj-7hhx-2fgx"
],
"fixed_version": "1.10.1",
"advisory_count": 1,
"oldest_advisory_days": 935
},
{
"name": "semver",
"direct": false,
"version": "5.7.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-c2qf-rxjj-qqgw"
],
"fixed_version": "7.5.2",
"advisory_count": 1,
"oldest_advisory_days": 1126
},
{
"name": "svgo",
"direct": false,
"version": "2.8.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-xpqw-6gx7-v673"
],
"fixed_version": "4.0.1",
"advisory_count": 1,
"oldest_advisory_days": 138
},
{
"name": "@parcel/reporter-dev-server",
"direct": false,
"version": "2.8.1",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-qm9p-f9j5-w83w"
],
"fixed_version": "2.16.4",
"advisory_count": 1,
"oldest_advisory_days": 306
},
{
"name": "github.com/aws/aws-sdk-go",
"direct": false,
"version": "1.25.48",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.6,
"advisory_ids": [
"GHSA-6jvc-q2x7-pchv",
"GHSA-7f33-f4f5-xwgw",
"GHSA-f5pg-7wfw-84q9",
"GO-2022-0391",
"GO-2022-0635",
"GO-2022-0646"
],
"fixed_version": "1.34.0",
"advisory_count": 6,
"oldest_advisory_days": 1620
},
{
"name": "yaml",
"direct": false,
"version": "1.10.2",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 4.3,
"advisory_ids": [
"GHSA-48c2-rrv3-qjmp"
],
"fixed_version": "2.8.3",
"advisory_count": 1,
"oldest_advisory_days": 117
}
],
"collected": true,
"truncated": false,
"by_severity": {
"high": 6,
"critical": 1,
"moderate": 3
},
"advisory_count": 84,
"affected_count": 10,
"assessed_count": 246,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/aristanetworks/goarista",
"direct": false,
"version": "0.0.0-20170210015632-ea17b1a17847",
"ecosystem": "go"
},
{
"name": "github.com/aws/aws-sdk-go",
"direct": false,
"version": "1.25.48",
"ecosystem": "go"
},
{
"name": "github.com/elastic/gosigar",
"direct": false,
"version": "0.8.1-0.20180330100440-37f05ff46ffa",
"ecosystem": "go"
},
{
"name": "github.com/ethereum/go-ethereum",
"direct": false,
"version": "1.10.6",
"ecosystem": "go"
},
{
"name": "github.com/oneofone/xxhash",
"direct": false,
"version": "1.2.5",
"ecosystem": "go"
},
{
"name": "github.com/pborman/uuid",
"direct": false,
"version": "0.0.0-20170112150404-1b00554d8222",
"ecosystem": "go"
},
{
"name": "github.com/robertkrimen/otto",
"direct": false,
"version": "0.0.0-20170205013659-6a77b7cbc37d",
"ecosystem": "go"
},
{
"name": "github.com/rs/xhandler",
"direct": false,
"version": "0.0.0-20160618193221-ed27b6fd6521",
"ecosystem": "go"
},
{
"name": "github.com/spaolacci/murmur3",
"direct": false,
"version": "1.0.1-0.20190317074736-539464a789e9",
"ecosystem": "go"
},
{
"name": "github.com/steakknife/bloomfilter",
"direct": false,
"version": "0.0.0-20180922174646-6819c0d2a570",
"ecosystem": "go"
},
{
"name": "github.com/steakknife/hamming",
"direct": false,
"version": "0.0.0-20180906055917-c99c65617cd3",
"ecosystem": "go"
},
{
"name": "github.com/wsddn/go-ecdh",
"direct": false,
"version": "0.0.0-20161211032359-48726bab9208",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "0.0.0-20210322153248-0c34fe9e7dc2",
"ecosystem": "go"
},
{
"name": "golang.org/x/mobile",
"direct": false,
"version": "0.0.0-20200801112145-973feb4309de",
"ecosystem": "go"
},
{
"name": "gopkg.in/sourcemap.v1",
"direct": false,
"version": "1.0.5",
"ecosystem": "go"
},
{
"name": "gopkg.in/urfave/cli.v1",
"direct": false,
"version": "1.20.0",
"ecosystem": "go"
},
{
"name": "@babel/code-frame",
"direct": false,
"version": "7.18.6",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-identifier",
"direct": false,
"version": "7.19.1",
"ecosystem": "npm"
},
{
"name": "@babel/highlight",
"direct": false,
"version": "7.18.6",
"ecosystem": "npm"
},
{
"name": "@iarna/toml",
"direct": false,
"version": "2.2.5",
"ecosystem": "npm"
},
{
"name": "@jridgewell/gen-mapping",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/resolve-uri",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "@jridgewell/set-array",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/source-map",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/sourcemap-codec",
"direct": false,
"version": "1.4.14",
"ecosystem": "npm"
},
{
"name": "@jridgewell/trace-mapping",
"direct": false,
"version": "0.3.17",
"ecosystem": "npm"
},
{
"name": "@lezer/common",
"direct": false,
"version": "0.15.12",
"ecosystem": "npm"
},
{
"name": "@lezer/lr",
"direct": false,
"version": "0.15.8",
"ecosystem": "npm"
},
{
"name": "@lmdb/lmdb-darwin-arm64",
"direct": false,
"version": "2.5.2",
"ecosystem": "npm"
},
{
"name": "@lmdb/lmdb-darwin-x64",
"direct": false,
"version": "2.5.2",
"ecosystem": "npm"
},
{
"name": "@lmdb/lmdb-linux-arm",
"direct": false,
"version": "2.5.2",
"ecosystem": "npm"
},
{
"name": "@lmdb/lmdb-linux-arm64",
"direct": false,
"version": "2.5.2",
"ecosystem": "npm"
},
{
"name": "@lmdb/lmdb-linux-x64",
"direct": false,
"version": "2.5.2",
"ecosystem": "npm"
},
{
"name": "@lmdb/lmdb-win32-x64",
"direct": false,
"version": "2.5.2",
"ecosystem": "npm"
},
{
"name": "@mischnic/json-sourcemap",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "@msgpackr-extract/msgpackr-extract-darwin-arm64",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@msgpackr-extract/msgpackr-extract-darwin-x64",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@msgpackr-extract/msgpackr-extract-linux-arm",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@msgpackr-extract/msgpackr-extract-linux-arm64",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@msgpackr-extract/msgpackr-extract-linux-x64",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@msgpackr-extract/msgpackr-extract-win32-x64",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@parcel/bundler-default",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/cache",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/codeframe",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/compressor-raw",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/config-default",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/core",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/diagnostic",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/events",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/fs",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/fs-search",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/graph",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/hash",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/logger",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/markdown-ansi",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/namer-default",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/node-resolver-core",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/optimizer-css",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/optimizer-htmlnano",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/optimizer-image",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/optimizer-svgo",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/optimizer-terser",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/package-manager",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/packager-css",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/packager-html",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/packager-js",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/packager-raw",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/packager-svg",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/plugin",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/reporter-cli",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/reporter-dev-server",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/resolver-default",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/runtime-browser-hmr",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/runtime-js",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/runtime-react-refresh",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/runtime-service-worker",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/source-map",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-babel",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-css",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-html",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-image",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-js",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-json",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-postcss",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-posthtml",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-raw",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-react-refresh-wrap",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/transformer-svg",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/types",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/utils",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@parcel/watcher",
"direct": false,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "@parcel/workers",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "@prettier/cli",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "@swc/helpers",
"direct": false,
"version": "0.4.14",
"ecosystem": "npm"
},
{
"name": "@trysound/sax",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "@types/parse-json",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "abortcontroller-polyfill",
"direct": false,
"version": "1.7.5",
"ecosystem": "npm"
},
{
"name": "acorn",
"direct": false,
"version": "8.8.1",
"ecosystem": "npm"
},
{
"name": "ansi-purge",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "3.2.1",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "ansi-truncate",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "argparse",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "atomically",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "base-x",
"direct": false,
"version": "3.0.9",
"ecosystem": "npm"
},
{
"name": "binary-extensions",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "boolbase",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "browserslist",
"direct": false,
"version": "4.21.4",
"ecosystem": "npm"
},
{
"name": "buffer-from",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "callsites",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "caniuse-lite",
"direct": false,
"version": "1.0.30001439",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "2.4.2",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "chrome-trace-event",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "clone",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "1.9.3",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": false,
"version": "2.20.3",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "cosmiconfig",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "css-select",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "css-tree",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "css-what",
"direct": false,
"version": "6.1.0",
"ecosystem": "npm"
},
{
"name": "csso",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "detect-libc",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "dettle",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "dom-serializer",
"direct": false,
"version": "1.4.1",
"ecosystem": "npm"
},
{
"name": "domelementtype",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "domhandler",
"direct": false,
"version": "4.3.1",
"ecosystem": "npm"
},
{
"name": "domutils",
"direct": false,
"version": "2.8.0",
"ecosystem": "npm"
},
{
"name": "dotenv",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "dotenv-expand",
"direct": false,
"version": "5.1.0",
"ecosystem": "npm"
},
{
"name": "electron-to-chromium",
"direct": false,
"version": "1.4.284",
"ecosystem": "npm"
},
{
"name": "entities",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "entities",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "error-ex",
"direct": false,
"version": "1.3.2",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "fast-ignore",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "fast-string-truncated-width",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "fast-string-width",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "find-up-json",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "find-up-path",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "get-current-package",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "get-port",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "globals",
"direct": false,
"version": "13.18.0",
"ecosystem": "npm"
},
{
"name": "grammex",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "highlight.js",
"direct": false,
"version": "10.7.3",
"ecosystem": "npm"
},
{
"name": "highlightjs-solidity",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "htmlnano",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "htmlparser2",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "import-fresh",
"direct": false,
"version": "3.3.0",
"ecosystem": "npm"
},
{
"name": "import-meta-resolve",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "ini-simple-parser",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "ionstore",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-arrayish",
"direct": false,
"version": "0.2.1",
"ecosystem": "npm"
},
{
"name": "is-binary-path",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "is-json",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "js-tokens",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "js-yaml",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "json-parse-even-better-errors",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "json-sorted-stringify",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json5",
"direct": false,
"version": "2.2.3",
"ecosystem": "npm"
},
{
"name": "kasi",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "lightningcss",
"direct": false,
"version": "1.17.1",
"ecosystem": "npm"
},
{
"name": "lightningcss-darwin-arm64",
"direct": false,
"version": "1.17.1",
"ecosystem": "npm"
},
{
"name": "lightningcss-darwin-x64",
"direct": false,
"version": "1.17.1",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-arm-gnueabihf",
"direct": false,
"version": "1.17.1",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-arm64-gnu",
"direct": false,
"version": "1.17.1",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-arm64-musl",
"direct": false,
"version": "1.17.1",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-x64-gnu",
"direct": false,
"version": "1.17.1",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-x64-musl",
"direct": false,
"version": "1.17.1",
"ecosystem": "npm"
},
{
"name": "lightningcss-win32-x64-msvc",
"direct": false,
"version": "1.17.1",
"ecosystem": "npm"
},
{
"name": "lines-and-columns",
"direct": false,
"version": "1.2.4",
"ecosystem": "npm"
},
{
"name": "lmdb",
"direct": false,
"version": "2.5.2",
"ecosystem": "npm"
},
{
"name": "mdn-data",
"direct": false,
"version": "2.0.14",
"ecosystem": "npm"
},
{
"name": "msgpackr",
"direct": false,
"version": "1.8.1",
"ecosystem": "npm"
},
{
"name": "msgpackr-extract",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "node-addon-api",
"direct": false,
"version": "3.2.1",
"ecosystem": "npm"
},
{
"name": "node-addon-api",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "node-gyp-build",
"direct": false,
"version": "4.5.0",
"ecosystem": "npm"
},
{
"name": "node-gyp-build-optional-packages",
"direct": false,
"version": "5.0.3",
"ecosystem": "npm"
},
{
"name": "node-releases",
"direct": false,
"version": "2.0.6",
"ecosystem": "npm"
},
{
"name": "nth-check",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "nullthrows",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "ordered-binary",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "parcel",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "parent-module",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "parse-json",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "path-type",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "picocolors",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "pioppo",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "postcss-value-parser",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "posthtml",
"direct": false,
"version": "0.16.6",
"ecosystem": "npm"
},
{
"name": "posthtml-parser",
"direct": false,
"version": "0.10.2",
"ecosystem": "npm"
},
{
"name": "posthtml-parser",
"direct": false,
"version": "0.11.0",
"ecosystem": "npm"
},
{
"name": "posthtml-render",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "prettier",
"direct": false,
"version": "3.2.5",
"ecosystem": "npm"
},
{
"name": "prettier",
"direct": false,
"version": "4.0.0-alpha.8",
"ecosystem": "npm"
},
{
"name": "promise-make-naked",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "react-error-overlay",
"direct": false,
"version": "6.0.9",
"ecosystem": "npm"
},
{
"name": "react-refresh",
"direct": false,
"version": "0.9.0",
"ecosystem": "npm"
},
{
"name": "regenerator-runtime",
"direct": false,
"version": "0.13.11",
"ecosystem": "npm"
},
{
"name": "resolve-from",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "safe-buffer",
"direct": false,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "5.7.1",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "source-map-support",
"direct": false,
"version": "0.5.21",
"ecosystem": "npm"
},
{
"name": "specialist",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "stable",
"direct": false,
"version": "0.1.8",
"ecosystem": "npm"
},
{
"name": "stdin-blocker",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "stubborn-fs",
"direct": false,
"version": "1.2.5",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "5.5.0",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "svgo",
"direct": false,
"version": "2.8.0",
"ecosystem": "npm"
},
{
"name": "term-size",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "terser",
"direct": false,
"version": "5.16.1",
"ecosystem": "npm"
},
{
"name": "timsort",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "tiny-bin",
"direct": false,
"version": "1.7.1",
"ecosystem": "npm"
},
{
"name": "tiny-colors",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "tiny-cursor",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "tiny-editorconfig",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "tiny-jsonc",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "tiny-levenshtein",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "tiny-parse-argv",
"direct": false,
"version": "2.4.0",
"ecosystem": "npm"
},
{
"name": "tiny-readdir",
"direct": false,
"version": "2.7.0",
"ecosystem": "npm"
},
{
"name": "tiny-readdir-glob",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "tiny-spinner",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "tiny-truncate",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "tiny-updater",
"direct": false,
"version": "3.5.1",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "type-fest",
"direct": false,
"version": "0.20.2",
"ecosystem": "npm"
},
{
"name": "update-browserslist-db",
"direct": false,
"version": "1.0.10",
"ecosystem": "npm"
},
{
"name": "utility-types",
"direct": false,
"version": "3.10.0",
"ecosystem": "npm"
},
{
"name": "v8-compile-cache",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "weak-lru-cache",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "webworker-shim",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "when-exit",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "worktank",
"direct": false,
"version": "2.6.0",
"ecosystem": "npm"
},
{
"name": "xxhash-wasm",
"direct": false,
"version": "0.4.2",
"ecosystem": "npm"
},
{
"name": "yaml",
"direct": false,
"version": "1.10.2",
"ecosystem": "npm"
},
{
"name": "zeptomatch",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 246,
"direct_count": 0,
"indirect_count": 246
}
},
"maintainership": {
"issues": {
"open_prs": 9,
"merged_prs": 702,
"open_issues": 53,
"closed_ratio": 0.811,
"closed_issues": 228,
"closed_unmerged_prs": 84
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "msooseth",
"commits": 1476,
"avatar_url": "https://avatars.githubusercontent.com/u/99662964?v=4"
},
{
"type": "User",
"login": "d-xo",
"commits": 1332,
"avatar_url": "https://avatars.githubusercontent.com/u/6689924?v=4"
},
{
"type": "User",
"login": "mbrock",
"commits": 770,
"avatar_url": "https://avatars.githubusercontent.com/u/8154?v=4"
},
{
"type": "User",
"login": "MrChico",
"commits": 635,
"avatar_url": "https://avatars.githubusercontent.com/u/8930559?v=4"
},
{
"type": "User",
"login": "dbrock",
"commits": 330,
"avatar_url": "https://avatars.githubusercontent.com/u/14032?v=4"
},
{
"type": "User",
"login": "rainbreak",
"commits": 255,
"avatar_url": "https://avatars.githubusercontent.com/u/18486361?v=4"
},
{
"type": "User",
"login": "blishko",
"commits": 242,
"avatar_url": "https://avatars.githubusercontent.com/u/16404346?v=4"
},
{
"type": "User",
"login": "asymmetric",
"commits": 215,
"avatar_url": "https://avatars.githubusercontent.com/u/101816?v=4"
},
{
"type": "User",
"login": "arcz",
"commits": 206,
"avatar_url": "https://avatars.githubusercontent.com/u/4679721?v=4"
},
{
"type": "User",
"login": "elopez",
"commits": 157,
"avatar_url": "https://avatars.githubusercontent.com/u/2642849?v=4"
}
],
"contributors_sampled": 100,
"top_contributor_share": 0.228
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml",
"check-dependencies.yml",
"echidna-compat.yml",
"publish-docs.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json",
"yarn.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 6,
"reason": "Found 9/13 approved changesets -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 30 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 1,
"reason": "9 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "4ca42fd5b2dd1344b7596775fe5fe6ac2d03021f",
"ran_at": "2026-07-21T18:44:02Z",
"aggregate_score": 4.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/argotorg/hevm",
"host": "github.com",
"name": "hevm",
"owner": "argotorg"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"security": 57,
"vitality": 86,
"community": 60,
"governance": 73,
"engineering": 73
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 86,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"commits_last_year": 509,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 41
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "41/52 weeks with commits",
"points": 28.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 41
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "509 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 509
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"releases_count": 17,
"latest_release_tag": "release/0.58.0",
"releases_from_tags": false,
"days_since_latest_release": 22,
"mean_days_between_releases": 124.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "17 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 17
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 22 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 22
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~124.8 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 124.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 60,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"forks": 79,
"stars": 353,
"watchers": 8,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "353 stars",
"points": 41.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 353
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "79 forks",
"points": 15.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 79
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "8 watchers",
"points": 4.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 8
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (AGPL-3.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "AGPL-3.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 73,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 100,
"top_contributor_share": 0.228
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 23% of commits",
"points": 17.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 23
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "100 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 100
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 30 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"merged_prs": 702,
"open_issues": 53,
"closed_issues": 228,
"issue_closed_ratio": 0.811,
"closed_unmerged_prs": 84
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "81% of issues closed",
"points": 37.9,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 81
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "702/786 decided PRs merged",
"points": 34.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 702,
"decided": 786
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 9/13 approved changesets -- score normalized to 6",
"points": 9,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"followers": 196,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "argotorg",
"public_repos": 21,
"account_age_days": 672
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "196 followers of argotorg",
"points": 16.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 196,
"login": "argotorg"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "21 public repos, account ~1 yr old",
"points": 13.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 21
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 73,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://hevm.dev",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://hevm.dev",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 57,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 46,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 9/13 approved changesets -- score normalized to 6",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 30 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "9 existing vulnerabilities detected",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 246 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 246
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 84,
"affected_packages": 10,
"assessed_packages": 246,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, high 6, moderate 3",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 246,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 15
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 53,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.62,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "62 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 33.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 62,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"has_nix": true,
"has_tests": true,
"lockfiles": [
"package-lock.json",
"yarn.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.11,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Haskell (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Haskell"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Nix, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Nix, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "11 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 11,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 93,
"inputs": {
"primary_language": "Haskell",
"largest_source_bytes": 2509240,
"source_files_sampled": 15,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Haskell (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Haskell"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/15 source files over 60KB",
"points": 47.7,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 15,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-21T18:44:31.329234Z",
"schema_version": "0.23.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/argotorg/hevm.svg",
"full_name": "argotorg/hevm",
"license_state": "standard",
"license_spdx": "AGPL-3.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.23.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.