Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 20:47 UTC
caspermeijn / prost
PROST! a Protocol Buffers implementation for the Rust Language
caspermeijn/prost holds a health index of 42 out of 100, placing it in the At risk band. It scores highest on Security (58/100) and lowest on Community & Adoption (34/100). It was last updated 21 days ago. A single contributor accounts for most of its recent work.
42
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
42
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Casper MeijnPersonal account
13 followers105 public repossince Dec 2011
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| crates.io | prostpoints to another repo — not scored | 0.14.4 | 40,093,253 | 46 | 49 days ago | protobufserializationencoding |
| crates.io | protobuf | 3.7.2 | 12,090,138 | 177 | 16 days ago | — |
| crates.io | conformancepoints to another repo — not scored | 0.2.0 | 6 | 2 | 2481 days ago | serdeconformancetesting |
| crates.io | prost-buildpoints to another repo — not scored | 0.14.4 | 22,054,618 | 47 | 49 days ago | — |
| crates.io | prost-typespoints to another repo — not scored | 0.14.4 | 29,327,814 | 42 | 49 days ago | — |
| crates.io | prost-derivepoints to another repo — not scored | 0.14.4 | 38,534,055 | 42 | 49 days ago | — |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
37
Development activity
29Critical
How it's scored
| 28.8/36 | Push recency — last push 21 days ago |
| 0/36 | Commit cadence — 0/52 weeks with commits |
| 0/18 | Commit volume — 0 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 0 |
| human_commit_share | 0.94 |
| days_since_last_push | 21 |
| active_weeks_last_year | 0 |
Release discipline
48At risk
How it's scored
| 16.2/27 | Ships releases — 2 version tags (no GitHub releases) |
| 7.2/36 | Release recency — latest release 597 days ago |
| 19.8/27 | Release cadence — a release every ~97.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 2 |
| latest_release_tag | v0.13.4 |
| releases_from_tags | yes |
| days_since_latest_release | 597 |
| mean_days_between_releases | 97.8 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
34
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
25Critical
How it's scored
| 0/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | no |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
100Excellent
How it's scored
| 80/80 | Monthly downloads — 12,090,138 downloads/month across crates |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | protobuf |
| dependents | — |
| ecosystems | crates |
| total_downloads | 162,263,641 |
| monthly_downloads | 12,090,138 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
47
Maintainer resilience (bus factor)
43At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 10.9/22.5 | Commit distribution — top contributor authored 51% of commits |
| 13.5/13.5 | Contributor breadth — 99 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 20 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 99 |
| top_contributor_share | 0.514 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — 0/10 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 10 |
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship
54Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 8.2/25 | Owner reach — 13 followers of caspermeijn |
| 25/25 | Track record — 105 public repos, account ~14 yr old |
Inputs used
| followers | 13 |
| owner_type | User |
| is_verified | — |
| owner_login | caspermeijn |
| public_repos | 105 |
| account_age_days | 5,326 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on crates |
| 35/35 | Publish recency — latest publish 16 days ago |
| 20/20 | Version history — 177 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | protobuf |
| ecosystems | crates |
| any_deprecated | no |
| min_days_since_publish | 16 |
Engineering Quality
Are baseline engineering and documentation practices in place?
36
Engineering practices
60Moderate
How it's scored
| 24/24 | CI workflows — 2 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
1Critical
How it's scored
| 0/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | no |
| has_docs_dir | no |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
58
Security posture
47At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 20 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 4.7 |
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 62 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the crates:prost@0.14.4 runtime dependency closure — what installing the published package pulls in — 62 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
58
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 94 of 94 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
64Moderate
How it's scored
| 12.6/18 | One-command bootstrap — Cargo.toml, benchmarks/Cargo.toml, conformance/Cargo.toml (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Rust (statically typed) |
| 10/10 | Reproducible environment — devcontainer, Nix |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 8/8 | Automated maintenance — 6 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | yes |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | yes |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | Cargo.toml, benchmarks/Cargo.toml, conformance/Cargo.toml, fuzz/Cargo.toml, fuzz/afl/proto3/Cargo.toml, prost-build/Cargo.toml, prost-derive/Cargo.toml, prost-types/Cargo.toml, prost/Cargo.toml, protobuf/Cargo.toml, tests-2015/Cargo.toml, tests-2018/Cargo.toml, tests-no-std/Cargo.toml, tests/Cargo.toml, tests/single-include/Cargo.toml |
| dependency_bot_commit_share | 0.06 |
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — Rust (statically typed) |
| 54.3/55 | Manageable file sizes — 1/84 source files over 60KB |
Inputs used
| primary_language | Rust |
| largest_source_bytes | 94,767 |
| source_files_sampled | 84 |
| oversized_source_files | 1 |
Machine-readable interfaces
40At risk
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — prost-build/src/fixtures/alphabet/a.proto, prost-build/src/fixtures/alphabet/b.proto, prost-build/src/fixtures/alphabet/c.proto, prost-build/src/fixtures/alphabet/d.proto, prost-build/src/fixtures/alphabet/e.proto, prost-build/src/fixtures/alphabet/f.proto, prost-build/src/fixtures/field_attributes/field_attributes.proto, prost-build/src/fixtures/helloworld/goodbye.proto, prost-build/src/fixtures/helloworld/hello.proto, prost-build/src/fixtures/helloworld/types.proto, prost-build/src/fixtures/imports_empty/imports_empty.proto, prost-build/src/fixtures/smoke_test/smoke_test.proto, tests/single-include/protos/outdir.proto, tests/single-include/protos/search.proto, tests/src/boxed_field.proto, tests/src/custom_attributes.proto, tests/src/custom_debug.proto, tests/src/default_enum_value.proto, tests/src/default_string_escape.proto, tests/src/deprecated_field.proto, tests/src/derive_copy.proto, tests/src/enum_keyword_variant.proto, tests/src/groups.proto, tests/src/ident_conversion.proto, tests/src/include/google/protobuf/any.proto, tests/src/include/google/protobuf/api.proto, tests/src/include/google/protobuf/compiler/plugin.proto, tests/src/include/google/protobuf/descriptor.proto, tests/src/include/google/protobuf/duration.proto, tests/src/include/google/protobuf/empty.proto, tests/src/include/google/protobuf/field_mask.proto, tests/src/include/google/protobuf/source_context.proto, tests/src/include/google/protobuf/struct.proto, tests/src/include/google/protobuf/timestamp.proto, tests/src/include/google/protobuf/type.proto, tests/src/include/google/protobuf/wrappers.proto, tests/src/invalid_doctest.proto, tests/src/nesting.proto, tests/src/no_package.proto, tests/src/no_root_packages/gizmo.proto, tests/src/no_root_packages/root.proto, tests/src/no_root_packages/widget.proto, tests/src/no_root_packages/widget_factory.proto, tests/src/no_shadowed_types.proto, tests/src/no_unused_results.proto, tests/src/oneof_attributes.proto, tests/src/option_enum.proto, tests/src/option_struct.proto, tests/src/packages/gizmo.proto, tests/src/packages/root.proto, tests/src/packages/widget.proto, tests/src/packages/widget_factory.proto, tests/src/proto3_presence.proto, tests/src/recursive_oneof.proto, tests/src/result_enum.proto, tests/src/result_struct.proto, tests/src/submessage_without_package.proto, tests/src/type_names.proto, tests/src/well_known_types.proto, third_party/old_protobuf_benchmarks/benchmarks.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto, third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto |
| 0/20 | MCP server |
| 0/40 | Runnable examples |
Inputs used
| example_dirs | — |
| has_mcp_signal | no |
| api_schema_files | prost-build/src/fixtures/alphabet/a.proto, prost-build/src/fixtures/alphabet/b.proto, prost-build/src/fixtures/alphabet/c.proto, prost-build/src/fixtures/alphabet/d.proto, prost-build/src/fixtures/alphabet/e.proto, prost-build/src/fixtures/alphabet/f.proto, prost-build/src/fixtures/field_attributes/field_attributes.proto, prost-build/src/fixtures/helloworld/goodbye.proto, prost-build/src/fixtures/helloworld/hello.proto, prost-build/src/fixtures/helloworld/types.proto, prost-build/src/fixtures/imports_empty/imports_empty.proto, prost-build/src/fixtures/smoke_test/smoke_test.proto, tests/single-include/protos/outdir.proto, tests/single-include/protos/search.proto, tests/src/boxed_field.proto, tests/src/custom_attributes.proto, tests/src/custom_debug.proto, tests/src/default_enum_value.proto, tests/src/default_string_escape.proto, tests/src/deprecated_field.proto, tests/src/derive_copy.proto, tests/src/enum_keyword_variant.proto, tests/src/groups.proto, tests/src/ident_conversion.proto, tests/src/include/google/protobuf/any.proto, tests/src/include/google/protobuf/api.proto, tests/src/include/google/protobuf/compiler/plugin.proto, tests/src/include/google/protobuf/descriptor.proto, tests/src/include/google/protobuf/duration.proto, tests/src/include/google/protobuf/empty.proto, tests/src/include/google/protobuf/field_mask.proto, tests/src/include/google/protobuf/source_context.proto, tests/src/include/google/protobuf/struct.proto, tests/src/include/google/protobuf/timestamp.proto, tests/src/include/google/protobuf/type.proto, tests/src/include/google/protobuf/wrappers.proto, tests/src/invalid_doctest.proto, tests/src/nesting.proto, tests/src/no_package.proto, tests/src/no_root_packages/gizmo.proto, tests/src/no_root_packages/root.proto, tests/src/no_root_packages/widget.proto, tests/src/no_root_packages/widget_factory.proto, tests/src/no_shadowed_types.proto, tests/src/no_unused_results.proto, tests/src/oneof_attributes.proto, tests/src/option_enum.proto, tests/src/option_struct.proto, tests/src/packages/gizmo.proto, tests/src/packages/root.proto, tests/src/packages/widget.proto, tests/src/packages/widget_factory.proto, tests/src/proto3_presence.proto, tests/src/recursive_oneof.proto, tests/src/result_enum.proto, tests/src/result_struct.proto, tests/src/submessage_without_package.proto, tests/src/type_names.proto, tests/src/well_known_types.proto, third_party/old_protobuf_benchmarks/benchmarks.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto, third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto |
Key facts
0GitHub stars
99contributors
0commits, last 12 months
21days since last push
2releases
1bus factor
0open issues
crates.iopackage ecosystems
Data collection warnings
- Community profile unavailable
- crates package 'prost' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring
- Could not fetch crates package 'tests-2015' from its registry
- Could not fetch crates package 'tests-2018' from its registry
- crates package 'conformance' points at a different repository (https://github.com/CAD97/tinyc/tree/master/crates/conformance); excluded from ecosystem scoring
- crates package 'prost-build' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring
- crates package 'prost-types' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring
- crates package 'prost-derive' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 4.7 / 10
4.7aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 20 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 45
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| crates.io | bytes | 1 | conformance/Cargo.toml |
| crates.io | env_logger | 0.11 | conformance/Cargo.toml |
| crates.io | prost | — | conformance/Cargo.toml |
| crates.io | protobuf | — | conformance/Cargo.toml |
| crates.io | tests | — | conformance/Cargo.toml |
| crates.io | bytes | 1 | prost-build/Cargo.toml |
| crates.io | heck | >=0.4, <=0.5 | prost-build/Cargo.toml |
| crates.io | itertools | >=0.10, <=0.13 | prost-build/Cargo.toml |
| crates.io | log | 0.4.4 | prost-build/Cargo.toml |
| crates.io | multimap | >=0.8, <=0.10 | prost-build/Cargo.toml |
| crates.io | petgraph | 0.6 | prost-build/Cargo.toml |
| crates.io | prost | 0.13.3 | prost-build/Cargo.toml |
| crates.io | prost-types | 0.13.3 | prost-build/Cargo.toml |
| crates.io | tempfile | 3 | prost-build/Cargo.toml |
| crates.io | once_cell | 1.17.1 | prost-build/Cargo.toml |
| crates.io | regex | 1.8.1 | prost-build/Cargo.toml |
| crates.io | prettyplease | 0.2 | prost-build/Cargo.toml |
| crates.io | syn | 2 | prost-build/Cargo.toml |
| crates.io | pulldown-cmark | 0.12 | prost-build/Cargo.toml |
| crates.io | pulldown-cmark-to-cmark | >=16, <=17 | prost-build/Cargo.toml |
| crates.io | anyhow | 1.0.1 | prost-derive/Cargo.toml |
| crates.io | itertools | >=0.10.1, <=0.13 | prost-derive/Cargo.toml |
| crates.io | proc-macro2 | 1.0.60 | prost-derive/Cargo.toml |
| crates.io | quote | 1 | prost-derive/Cargo.toml |
| crates.io | syn | 2 | prost-derive/Cargo.toml |
| crates.io | prost | 0.13.3 | prost-types/Cargo.toml |
| crates.io | bytes | 1 | prost/Cargo.toml |
| crates.io | prost-derive | 0.13.3 | prost/Cargo.toml |
| crates.io | prost | — | protobuf/Cargo.toml |
| crates.io | prost-types | — | protobuf/Cargo.toml |
| crates.io | anyhow | 1.0.1 | tests-2015/Cargo.toml |
| crates.io | cfg-if | 1 | tests-2015/Cargo.toml |
| crates.io | prost | — | tests-2015/Cargo.toml |
| crates.io | prost-types | — | tests-2015/Cargo.toml |
| crates.io | protobuf | — | tests-2015/Cargo.toml |
| crates.io | anyhow | 1.0.1 | tests-2018/Cargo.toml |
| crates.io | bytes | 1 | tests-2018/Cargo.toml |
| crates.io | cfg-if | 1 | tests-2018/Cargo.toml |
| crates.io | prost | — | tests-2018/Cargo.toml |
| crates.io | prost-types | — | tests-2018/Cargo.toml |
| crates.io | protobuf | — | tests-2018/Cargo.toml |
| crates.io | anyhow | 1.0.45 | tests-no-std/Cargo.toml |
| crates.io | cfg-if | 1 | tests-no-std/Cargo.toml |
| crates.io | prost | — | tests-no-std/Cargo.toml |
| crates.io | prost-types | — | tests-no-std/Cargo.toml |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing crates:prost@0.14.4 pulls in 62 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": true,
"size_kb": 52102,
"has_wiki": false,
"homepage": null,
"languages": {
"Nix": 532,
"Rust": 610667,
"Shell": 2220
},
"pushed_at": "2026-07-05T08:44:34Z",
"created_at": "2023-11-23T12:55:47Z",
"owner_type": "User",
"updated_at": "2024-09-25T05:41:36Z",
"description": "PROST! a Protocol Buffers implementation for the Rust Language",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "https://www.caspermeijn.nl/",
"name": "Casper Meijn",
"type": "User",
"login": "caspermeijn",
"company": null,
"location": "Nederland",
"followers": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/1286074?v=4",
"created_at": "2011-12-26T11:10:36Z",
"is_verified": null,
"public_repos": 105,
"account_age_days": 5326
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.13.4",
"kind": "patch",
"published_at": "2024-12-06T15:17:23Z"
},
{
"tag": "v0.13.2",
"kind": "patch",
"published_at": "2024-08-30T18:58:32Z"
}
],
"recent_commits": [
{
"oid": "9ed944eb633480079037dfceeee61aac6cd0c94f",
"body": null,
"is_bot": false,
"headline": "chore: Release version 0.13.3 (#1164)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-21T11:57:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb977f4cc28a3f5c913b963a27b553cf845bb9d2",
"body": "* fix(prost-build): Remove `derived(Copy)` on boxed fields\n\n* Add regression test",
"is_bot": false,
"headline": "fix(prost-build): Remove `derived(Copy)` on boxed fields (#1157)",
"author_name": "Donough Liu",
"author_login": "ldm0",
"committed_at": "2024-09-20T06:09:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d4cac58ef7c5e33ba3279c836966c9109d4554c",
"body": "Make `normalize` easier to use, by introducing `Duration::normalized` and `Timestamp::normalized`. They do the same as there `normalize` equivalents, but return a copy for ease of use.",
"is_bot": false,
"headline": "feat(prost-types): Add `normalized` functions (#1158)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-20T05:36:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "644c328de4a2560d4cd12e01245faf9b8d1ddd0f",
"body": null,
"is_bot": false,
"headline": "build(deps): update pulldown-cmark-to-cmark from 16 to 17 (#1155)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-13T07:30:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b1b982d5f21de68f32d9f3f5b885731f2ccee83",
"body": "Fixes `clippy::use_self` violations",
"is_bot": false,
"headline": "style(generated-code): use `Self` in `as_str_name` (#1154)",
"author_name": "Alice Carroll",
"author_login": "magistau",
"committed_at": "2024-09-13T07:29:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fa3f2e5cb6d1d1967644b22cdeecf160410ad41",
"body": "Due to conflicting PR #1152 and #1150 tests were failing.",
"is_bot": false,
"headline": "tests(prost-build): Fix error texts (#1156)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-13T06:18:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7dcd269a0e16e4aea83c070e4b61d8f8cd0c47cd",
"body": "Trigger all errors of `prost-build` and check the produced error text",
"is_bot": false,
"headline": "tests(prost-build): Validate error texts (#1152)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-11T06:01:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3fd54c73f413c060592aaf5929c753c0b376252",
"body": "`MessageGraph` is an internal type. The currenly implementation can't fail, so it doesn't have to return a `Result`",
"is_bot": false,
"headline": "style: `MessageGraph::new()` can't actually fail (#1151)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-11T05:58:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d059d0515226fe9fa5c7188ea50594112bba231a",
"body": null,
"is_bot": false,
"headline": "style: use `Path::display()` when printing a path (#1150)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-11T05:58:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18c4681d96b59820bf319b6f84749f17258d248d",
"body": "Update the example in the generated documenation.\n- Use `cargo add` to dependencies, instead of refering to the latest version\n- Add more protobuf comments, as the documenation is mentioned in the last step",
"is_bot": false,
"headline": "docs(prost-build): Use `cargo add` in example (#1149)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-11T05:57:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61745dedc0de751890dd0dd75c92a8f982367ce5",
"body": null,
"is_bot": false,
"headline": "tests: Actually test `skip_debug` for `prost::Oneof` (#1148)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-05T17:49:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef8c040a5f7a9bf974b8ffe1a13a7fca34b72286",
"body": "…136)\n\nCrate `protobuf` compiles some .proto-files from the checked out repo in `third_party/protobuf`. Those files can use newest features from `protoc`. Therefore during development the `protoc` in `PATH` must be the same version or newer than in `third_party/protobuf`.\n\nThe crate already builds a\n[…]\n out repo to be used in conformance executable. Use that specific `protoc` for compiling the .proto-files in the crate.\n\nThis doesn't influence the `protoc` used in crate `tests` nor published crates.",
"is_bot": false,
"headline": "build(protobuf): Use same `protoc` from same repo as .proto-files (#1…",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-04T14:44:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e3129e47aeeca27ff8dad5c5e66874613f57edb4",
"body": "There are multiple implementations of assert on fixture files. Some also write to the file to ease development and some normalize line endings. Unify their implementation so that they work similar.",
"is_bot": false,
"headline": "chore: unify assert on fixtures (#1142)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-04T14:42:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fc71325db4a7abfe85ac42f7b55be87160fc325",
"body": null,
"is_bot": false,
"headline": "build(protobuf): Compile and install protoc on Windows (#1145)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-04T11:02:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ab14c27a05417d030002a1d58bfa7db15949e09",
"body": "…k to 16 (#1144)",
"is_bot": false,
"headline": "build(deps): update pulldown-cmark to 0.12 and pulldown-cmark-to-cmar…",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-09-04T11:02:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96c40d77006974cfc59947a03372e0ccd2ea3589",
"body": null,
"is_bot": false,
"headline": "docs(prost-types): Add description of using Any (#1141)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-30T19:16:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02f3edf82b8d05ae39e4ed11f1467fdf3e1e91a0",
"body": "Rust 1.71.1 was released on Aug. 3, 2023 (1 year ago at this time). This allows to bump `pulldown-cmark` dependency to the latest version.",
"is_bot": false,
"headline": "build: Increase MSRV to 1.71.1 (#1135)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-30T19:15:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57e794203106db483e5115e7e67502ef6f2c7ad8",
"body": null,
"is_bot": false,
"headline": "chore: Release version 0.13.2 (#1139)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-30T18:58:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8424775d78b13239df3cf3fe888236770a0cd839",
"body": "Let the crate `cmake` handle the interaction with CMake executable. This simplifies our codebase and improves compatibility with other platforms.\n\n`CMAKE_BUILD_TYPE` is handle automatically based on `opt-level`.\n\nSet `CMAKE_GENERATOR` environment variable in CI instead of hardcoded dependency on `ninja-build`.",
"is_bot": false,
"headline": "build(protobuf): Use crate `cmake` (#1137)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-28T11:18:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21208abf667313866f79d3d1438310c4dc20bdff",
"body": "…(#1125)\n\nBumps [model-checking/kani-github-action](https://github.com/model-checking/kani-github-action) from 0.32 to 1.1.\n- [Release notes](https://github.com/model-checking/kani-github-action/releases)\n- [Commits](https://github.com/model-checking/kani-github-action/compare/v0.32...v1.1)\n\n---\nupd\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump model-checking/kani-github-action from 0.32 to 1.1 …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-08-23T09:54:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0c79864443621f20d92f9acc78a6ab0e7821dab0",
"body": "Add a fuzzing target for parsing into a Duration.",
"is_bot": false,
"headline": "tests(fuzz): Add `parse_duration` fuzzing target (#1129)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-23T09:10:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52046b943fdf6f79461725027245f890c7b4f514",
"body": "Three proptests are executed as kani proofs in CI.\nMake that explicit by marking them as kani proof.\nThis removes the dependency on propproof dependency when using kani.",
"is_bot": false,
"headline": "tests: Change some proptest to kani proofs (#1133)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-23T09:09:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee59dd5a9fe0935ad50e6ddbea5d23e3c6419468",
"body": "The crate `tests-no-std` was never build without std in CI. Therefore the build was broken.\n\nUse the `no_std` compatible `anyhow` calls and run `no-std-check` on the crate.",
"is_bot": false,
"headline": "tests: Fix build without std (#1134)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-23T07:06:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e773f5f6d38f74d0efff876011a2fd0d002aed4c",
"body": "Set the path to `protoc` executable to be used by `prost-build`\n\nUse the provided path to find `protoc`. This can either be a file name which is\nsearched for in the `PATH` or an aboslute path to use a specific executable.",
"is_bot": false,
"headline": "feat(prost-build): Add protoc executable path to Config (#1126)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-20T09:48:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "753bd92a85a3aa305d9d96b5c6363dc58d6356e6",
"body": "Remove feature check for a feature that doesn't exist in the `tests` crate. This allows clippy to be updated.",
"is_bot": false,
"headline": "ci(clippy): Update to cargo clippy version 1.80 (#1128)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-19T07:06:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df3e58e5d113a0dcf8b6735a5d04cde2d74e5df3",
"body": "Add a fuzzing target for parsing into a Timestamp and comparing the result with crate chrono.",
"is_bot": false,
"headline": "tests(fuzz): Add `parse_date` fuzzing target (#1127)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-17T12:56:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "409b93214ed8d98fbb364031ccf330ce4e7caa32",
"body": "`cargo clippy` reports:\n```\nwarning: the borrowed expression implements the required traits\n --> protobuf/build.rs:143:14\n |\n143 | ...rg(&format!(\"-DCMAKE_INSTALL_PREFIX={}\", prefix_dir.display(...\n | ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ help: change this to: `fo\n[…]\nfurther information visit https://rust-lang.github.io/rust-clippy/master/index.html#needless_borrows_for_generic_args\n = note: `#[warn(clippy::needless_borrows_for_generic_args)]` on by default\n```",
"is_bot": false,
"headline": "style: Remove needless borrow (#1122)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-16T10:27:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7670f420bdbee080b762a0e6397e436fb095503b",
"body": "Bumps [baptiste0928/cargo-install](https://github.com/baptiste0928/cargo-install) from 2 to 3.\n- [Release notes](https://github.com/baptiste0928/cargo-install/releases)\n- [Changelog](https://github.com/baptiste0928/cargo-install/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/baptiste0928/car\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump baptiste0928/cargo-install from 2 to 3 (#1124)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-08-16T09:59:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cb45beb6281e26db0b21a9f991fd155f9e77ee90",
"body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3 to 4.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifac\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/upload-artifact from 3 to 4 (#1123)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-08-16T09:58:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f1d7bda55edde889eca9a28d7eb19c3232c127f5",
"body": null,
"is_bot": false,
"headline": "tests: Add tests for public interface of DecodeError (#1120)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-16T09:21:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "258231d4e20e93c596304e9d4bdc8cb9ff55bea0",
"body": "The build script of crate `protobuf` installs some proto-files for testing in the prefix dir. However the only user is the same build script. Therefore we can skip the install and use the files directly.\n\nUse `absolute` path instead of `canonical` path, as `protoc` on Windows is not able to process `canonical` paths. This is sort of documented in https://doc.rust-lang.org/std/fs/fn.canonicalize.html",
"is_bot": false,
"headline": "build(protobuf): Don't install unused test proto (#1116)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-16T09:20:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "345ae5941550987a1480811959b9b4e80b196483",
"body": "Automatically create PRs to update the version number of Github Actions",
"is_bot": false,
"headline": "ci(dependabot): Add github actions (#1121)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-16T09:18:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5c3525e5de18e4f1c9e17f569ca61288a34b0a5",
"body": "`cargo-fuzz` recommends adding the `fuzz` crate to the workspace. It seems the problem of not compiling is fixed with recent dependencies.\n\nsource: https://github.com/rust-fuzz/cargo-fuzz?tab=readme-ov-file#usage",
"is_bot": false,
"headline": "build(fuzz): Add fuzz targets to workspace (#1117)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-16T07:45:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d38072f5962e29b0cb1ebef6038510c54fa13ca7",
"body": "Running `cargo test --all-targets` will not run doctests, as noted in the removed comments.\n\nAnother effect is that Cargo.toml instructions for not running a test are ignored. For example, benchmarks are tested, but no unit tests are inside and bins marked with `test = false` are run.\n\nI diffed the text output of running `cargo test` and `cargo test --all-targets` and concluded that no useful test will be skipped when running just `cargo test`.",
"is_bot": false,
"headline": "ci: Run `cargo test` without `all-targets` (#1118)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-12T11:53:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53ca327dd0ee4507d55a073fa0f5de768d330eda",
"body": null,
"is_bot": false,
"headline": "build(deps): Update devcontainer to Debian Bookworm release (#1114)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-09T05:57:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a404d1f826bbd1b3b9917776b5e0d72c5cf0f6b",
"body": null,
"is_bot": false,
"headline": "chore: Remove allow clippy::derive_partial_eq_without_eq (#1115)",
"author_name": "tottoto",
"author_login": "tottoto",
"committed_at": "2024-08-09T05:56:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e55cdaa8123d21987d6ef972b8e4052076ef348",
"body": "`chrono` allows a negative zero local offset. I think we should follow their example.\n\nThe RFC 3339 spec says this is a special value, but doesn't specify how to handle the situation.\nhttps://www.rfc-editor.org/rfc/rfc3339#section-4.3",
"is_bot": false,
"headline": "fix(prost-types): Allow unknown local time offset (#1109)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-08-02T12:58:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d16bed88bb45abc6bbea92c9a42c454d8a194ec3",
"body": "Duration `-0.123s` was formatted as a positive number.",
"is_bot": false,
"headline": "fix(prost-types): Format negative fractional duration (#1110)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-31T11:44:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef27f65a55cad02f4b4a11d16912b44164ae818b",
"body": "* style: Move varint encoding to separate module\n\nWhile the `encoding` module is undocumented and not stable, there are known users. Leave a alias in place to prevent breaking them.\n\n* style: Move length delimiter encoding to separate module\n\nLeave a alias in `lib.rs` to prevent a breaking change.\n\n* style: Move wire type to separate module\n\nWhile the `encoding` module is undocumented and not stable, there are known users. Leave a alias in place to prevent breaking them.",
"is_bot": false,
"headline": "style: Move encoding functions into separate modules (#1111)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-31T11:42:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad5650b0c96b7e5c1f8310462af7f6e35c2a0bfe",
"body": "* build(fuzz): afl is not in root directory\n\nThere exists an `afl` directory inside `/fuzz/`, but that doesn't explain the workspace exclude\n\n* build(fuzz): create `fuzz` is not part of workspace\n\nTherefore it can't rely on workspace parameters\n\n* build(fuzz): Use released version of `libfizzer-sys`\n\n* build(fuzz): Add missing dependency",
"is_bot": false,
"headline": "build(fuzz): Fix building of fuzzing targets (#1107)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-22T08:30:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10761018682438db5202d50231cda1721eb01710",
"body": "`chrono` is able to parse timestamps which are more precise then nanoseconds. We can also do that but truncating the digits.",
"is_bot": false,
"headline": "fix(prost-types): Parse timestamp with long second fraction (#1106)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-20T14:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60092334927e100000cebf29f8f20f9c255830ee",
"body": "…1067)\n\n* prost-build: Extract file descriptor loading from compile_protos()\n\n* Update prost-build/src/config.rs\n\nCo-authored-by: Casper Meijn <casper@meijn.net>\n\n* Add concrete example for Config::load_fds()\n\n---------\n\nCo-authored-by: Casper Meijn <casper@meijn.net>",
"is_bot": false,
"headline": "prost-build: Extract file descriptor loading from compile_protos() (#…",
"author_name": "Sylvain Wallez",
"author_login": "swallez",
"committed_at": "2024-07-19T19:54:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5cc951127ea6f05faa72b48de7c2e8630f94555",
"body": "The converstion from the private type DateTime to public type Timestamp is fallible when the DateTime is invalid. All code paths that used `DateTime::into::<Timestamp>()` first check whether the DateTime is valid and then do the conversion, therefore this problem was not visible. https://github.com/\n[…]\npl From<DateTime> for Timestamp` with `TryFrom` and remove the manual `is_valid` checks before the conversion.\n\nI added the test cases from the issue and roundtrip test between DateTime and Timestamp.",
"is_bot": false,
"headline": "fix(prost-types): Converting DateTime to Timestamp is fallible (#1095)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-19T13:21:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23d9fd7ebed10cdbbb6e28da7ff66b3a585e45fc",
"body": "* Add Into instances for Value\n\n* Update conversions.rs\n\n* rustfmt",
"is_bot": false,
"headline": "Add From instances for Value (#1091)",
"author_name": "Andrzej Ressel",
"author_login": "andrzejressel",
"committed_at": "2024-07-19T11:44:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a291d0690541d2bfa2636c7833b6cbef3be49b19",
"body": "Prevent placing build artifacts in the protobuf source tree by choosing a build directory in the out dir. A `cargo clean` will clean up the build artifacts.",
"is_bot": false,
"headline": "build: Use separated build directory for protobuf (#1103)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-19T06:31:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d65230115ca8a9ea5e449a14ba01fabab056c566",
"body": "Add the benchmark protos and datasets from protobuf v3.14 to this repo. The upstream benchmarks have been\nchanged (and later removed) in newer versions of the upstream library. This copy ensures that\nthose benchmarks stay available for prost.\n\nThis is a requirement for updating to newer upstream protobuf version.",
"is_bot": false,
"headline": "chore: Move old protobuf benchmark into prost (#1100)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-19T06:31:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "366c6fb9f15e152597be8f88c709ae7e964196ec",
"body": null,
"is_bot": false,
"headline": "fix(prost-types): '+' is not a numeric digit (#1104)",
"author_name": "Kent Ross",
"author_login": "mumbleskates",
"committed_at": "2024-07-13T15:13:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee619460ef1f84c5c033d08b7a5b606116e0b414",
"body": "Cargo clippy reports:\n\n```\nwarning: usage of a legacy numeric method\n --> prost/src/lib.rs:71:24\n |\n71 | if length > usize::max_value() as u64 {\n | ^^^^^^^^^^^\n |\n = help: for further information visit https://rust-lang.github.io/rust-clippy/master/index.html#legacy_numeric_constants\nhelp: use the associated constant instead\n |\n71 | if length > usize::MAX as u64 {\n | ~~~\n```",
"is_bot": false,
"headline": "style: Remove use of legacy numeric constants (#1089)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-12T12:01:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "688da45b639d627c4e9bfdeb91c997294809ca9d",
"body": "Only the crate `tests-2015` uses the feature `edition-2015`, but the code is shared with the `tests` crate.\n\nSame for `tests-no-std` which disables feature `std`, but reuses the code with the `tests` crate.\n\nTherefore the `tests`, `tests-2018` and `tests-no-std` crates should be configured to ignore\n[…]\n note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration\n = note: `#[warn(unexpected_cfgs)]` on by default\n```",
"is_bot": false,
"headline": "build: Ignore missing features in `tests` crates (#1101)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-12T12:00:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a27310895a5bfc4537f956a6c6c061e5e84863d0",
"body": "The nightly compiler warns about a incompatibility of the Cargo.toml for the next edition. Use the backwards compatible `proc-macro` in the Cargo.toml.\n\nCompiler reports:\n```\nwarning: prost/prost-derive/Cargo.toml: `proc_macro` is deprecated in favor of `proc-macro` and will not work in the 2024 edition\n```",
"is_bot": false,
"headline": "build: Use `proc-macro` in Cargo.toml (#1102)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-12T12:00:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6481c61f6d17036871866f8a37c74ce8428dd99b",
"body": "* upstream date-time parsing fixes\n\n* add regression tests",
"is_bot": false,
"headline": "fix(prost-types): Fix date-time parsing (#1096)",
"author_name": "Kent Ross",
"author_login": "mumbleskates",
"committed_at": "2024-07-12T11:59:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f19104a3d4345f4635bbc5fd54cb5089572e2660",
"body": "* release 0.13.1\n\n* update changelog",
"is_bot": false,
"headline": "chore: prepare 0.13.1 release (#1099)",
"author_name": "Lucio Franco",
"author_login": "LucioFranco",
"committed_at": "2024-07-09T13:04:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26463f437e1a3445c9d3119cf9cf0f64f5b23dfa",
"body": "The generated code uses `Self::Error` to refer to `::prost::UnknownEnumValue`, but the term `Error` is not unique when an enum variant is called `Error`. Use the full type name to resolve the ambiguity.\n\nThe compiler reported:\n```\nerror: ambiguous associated item\n --> /home/ircdev/src/prost/target\n[…]\note: `#[deny(ambiguous_associated_items)]` on by default\n = note: this error originates in the derive macro `::prost::Enumeration` (in Nightly builds, run with -Z macro-backtrace for more info)\n```",
"is_bot": false,
"headline": "fix: Enum variant named `Error` causes ambiguous item (#1098)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-09T12:54:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23f71749696d5836afa143cbbb860fa8943e0640",
"body": null,
"is_bot": false,
"headline": "chore: Release version 0.13.0 (#1093)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-08T17:07:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a1424cf8c71c0c276970d1b8f1ef17c424d818d",
"body": "The prepare release script got out of sync with the actual code.\n- Automatically update the minor version in the readme\n- Cargo.toml version was moved in #1036",
"is_bot": false,
"headline": "build: Fix prepare-release.sh (#1094)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-07-08T14:13:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7790799b0dfc65f70cfde0a26e8f29f77510744a",
"body": "…10, <=0.14 (#1070)\n\nUpdates the requirements on [itertools](https://github.com/rust-itertools/itertools) to permit the latest version.\n- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/rust-itertools/itertools/compare/v0.10.0...v0.13.\n[…]\nndency-name: itertools\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): update itertools requirement from >=0.10, <=0.12 to >=0.…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-07-05T09:02:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4a0cc17102700d1215c791f1ee4b8df22481a19f",
"body": null,
"is_bot": false,
"headline": "Add missing LICENSE symlink (#1086)",
"author_name": "Cristian Le",
"author_login": "LecrisUT",
"committed_at": "2024-06-25T17:49:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae33a5ea97ff2df8a508b6f80fa5b88c4bc0c0a6",
"body": "Prevent CI breakage when new lints are added to stable rust version by explicitly choosing the rust version used for the clippy job.",
"is_bot": false,
"headline": "ci: Set rust version of clippy job to a fixed version (#1090)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-06-25T17:11:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba776540834b0cecbbaa6ca98bd79d9682cd7e92",
"body": "Most generated files are untouched when the contents doesn't change. Use the same mechanism for include file as well.",
"is_bot": false,
"headline": "fix: Only touch include file if contents is changed (#1058)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-06-10T11:19:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7049d3eb20cf33bb1ac60bff19cc3a7bd48f6f2",
"body": "* chore: remove `Cargo.toml` `documentation` field\n\n* chore: use cargo manifest `workspace.package.authors`\n\n* chore: use cargo manifest `workspace.package.repository`\n\n* chore: use cargo manifest `workspace.package.license`\n\n* chore: use cargo manifest `workspace.package.rust-version`\n\n* chore:\n[…]\ne.package.edition`:\n\n* chore: use cargo manifest `workspace.package.version`\n\n* chore: group cargo workspace package metadata usage\n\n* chore: use `workspace.edition` for remaining 2021 edition crates",
"is_bot": false,
"headline": "workspace package metadata (#1036)",
"author_name": "Gabriel Hansson",
"author_login": "gibbz00",
"committed_at": "2024-05-31T09:16:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ef4930c140c639eaaa0362662d90e55a31977eb3",
"body": "* docs: Fix broken link warnings\n\n* ci: Check for documentation warnings",
"is_bot": false,
"headline": "docs: Fix broken link warnings (#1056)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-31T07:24:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52ff081f4296e4563a7a0e0d984b58663d3f0fe8",
"body": "…078)\n\n* ci: Ensure both README are the same and prost version is correct\n\nFixes #1053\n\n* docs: Update prost version in README\n\n* build: Fix prepare-release.sh for README",
"is_bot": false,
"headline": "ci: Ensure both README are the same and prost version is correct (#1…",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-27T18:28:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cbf941bb304f7431910b0657e723e1fe3aa2c3e",
"body": "libz-sys is a optional dependency of a private crate that is never enabled.",
"is_bot": false,
"headline": "build(deps): Remove unused libz-sys (#1077)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-27T07:37:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a7bba0b241984fb8e6377600cd714a189e308c4",
"body": "Add a new UnknownEnumValue error type to prost,\nchange the TryFrom<i32> conversions generated for enums to use that\nas the associated Error type. The error value carries the original\ninteger, making it also more informative than DecodeError.",
"is_bot": false,
"headline": "Lightweight error value in TryFrom<i32> for enums (#1010)",
"author_name": "Mikhail Zabaluev",
"author_login": "mzabaluev",
"committed_at": "2024-05-27T07:19:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "683091ae47c84545e22ee70ebbb1bbead9a8990e",
"body": "The release scripts were broken by moving `prost` crate into a separated directory in #1033.\n\nfixes #1054",
"is_bot": false,
"headline": "build: Fix release scripts (#1055)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-24T16:18:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eec717bd632ab2d6ba97a389bb491fa5ac7cb6b5",
"body": "…rrs (#951)\n\n* better checking of tag duplicates, avoid discarding invalid variant errors\n\n* add some simple derive tests :)\n\n* use itertools duplicates()\n\n* don't print out unreadable syn junk when encountering unknown attributes\n\n* clarify and test backstop for the \"multiple tags in a oneof varian\n[…]\nsper Meijn <casper@meijn.net>\n\n* update the other instance of the .tuple_windows() trick to use .duplicates()\n\n* clarify & shorten assertion\n\n---------\n\nCo-authored-by: Casper Meijn <casper@meijn.net>",
"is_bot": false,
"headline": "better checking of tag duplicates, avoid discarding invalid variant e…",
"author_name": "Kent Ross",
"author_login": "mumbleskates",
"committed_at": "2024-05-24T10:01:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b9c4d3d537adfb0fa468a06ef9fdc10b497c17ae",
"body": "Updates the requirements on [criterion](https://github.com/bheisler/criterion.rs) to permit the latest version.\n- [Changelog](https://github.com/bheisler/criterion.rs/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/bheisler/criterion.rs/compare/0.4.0...0.5.1)\n\n---\nupdated-dependencies:\n- de\n[…]\nndency-name: criterion\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): update criterion requirement from 0.4 to 0.5 (#1071)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-05-23T14:17:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f8a0e012cbd37e0c968c7ef09724de9388b8d5bc",
"body": "Updates the requirements on [env_logger](https://github.com/rust-cli/env_logger) to permit the latest version.\n- [Release notes](https://github.com/rust-cli/env_logger/releases)\n- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/rust-cli/env_l\n[…]\ndency-name: env_logger\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): update env_logger requirement from 0.10 to 0.11 (#1074)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-05-23T14:15:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1ff42bffa832cdd98a0ff31da4bb5618e6b506c9",
"body": null,
"is_bot": false,
"headline": "ci: Add Dependabot (#957)",
"author_name": "Shaun Jackman",
"author_login": "sjackman",
"committed_at": "2024-05-23T13:39:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "993a6d132187a95c624bab527440e280e2f58af8",
"body": "Add a job that only finished if all tests pass. This will be configured as a required test to make sure all jobs pass on every commit.",
"is_bot": false,
"headline": "ci: Add all tests pass job (#1069)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-22T13:20:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b925a4fdfbc46ccef5f59c7cb223fe227c0cebda",
"body": "Instead of rebuilding everything with Rust 1.70 (MSRV), use `cargo hack` to only build published crates at their specified `rust-version`.\n\nCo-authored-by: tottoto <tottotodev@gmail.com>",
"is_bot": false,
"headline": "chore: Add ci to check MSRV (#1057)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-22T11:30:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2ce9edbf3267d1dd2ce1533ac6eb1134e7eb783",
"body": "Due to two pull requests changing the same function a build error occurred. `fields` has move to inside `oneof` and has changed type.",
"is_bot": false,
"headline": "fix: Build error due to merge conflict (#1068)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-21T13:32:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb5a1fa388ed198ce96dde39796d314dffa8c162",
"body": "* Change generated functions signatures to remove type parameters; fixes #1042\n\n* Add test to confirm no type shadowing\n\n* Change generated functions signatures to remove type parameters (rest of ::prost::Message trait)\n\n* Change functions signatures to avoid generic type parameters",
"is_bot": false,
"headline": "Change generated functions signatures to remove type parameters (#1045)",
"author_name": "Denis Fakhrtdinov",
"author_login": "shizzard",
"committed_at": "2024-05-20T16:42:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85c698a288bd2ae94cde44109f853214fb00915f",
"body": "* feat: derive Copy trait for messages where possible\n\nRust primitive types can be copied by simply copying the bits. Rust structs can also have this property by deriving the Copy trait.\n\nAutomatically derive Copy for:\n- messages that only have fields with primitive types\n- the Rust enum for one-of \n[…]\nGenerated code for Protobuf enums already derives Copy.\n\n* fix: Remove clone call when copy is implemented\n\nClippy reports: warning: using `clone` on type `Timestamp` which implements the `Copy` trait",
"is_bot": false,
"headline": "feat: derive Copy trait for messages where possible (#950)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-20T16:28:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d42c85e790263f78f6c626ceb0dac5fda0edcb41",
"body": null,
"is_bot": false,
"headline": "chore: fix prost release script (#1066)",
"author_name": "Lucio Franco",
"author_login": "LucioFranco",
"committed_at": "2024-05-17T15:59:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d43f7e0533b7b81e74d32346068971dc7fe5343f",
"body": "_PROST!_ is a [Protocol Buffers](https://developers.google.com/protocol-buffers/) implementation for the [Rust Language](https://www.rust-lang.org/). `prost` generates simple, idiomatic Rust code from `proto2` and `proto3` files.\n\nThis patch update fixes a regression:\n\n- fix(prost-build): re-export `error_message_protoc_not_found`, `protoc_from_env` & `protoc_include_from_env` (#1063)",
"is_bot": false,
"headline": "chore: Release version 0.12.6 (#1065)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-17T15:57:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b1131539bd551968fa66a369108f38912726c10",
"body": "…_from_env` & `protoc_include_from_env` (#1063)\n\nfixes: #1062\n\nI'm adding to fix a breaking change introduced in https://github.com/tokio-rs/prost/pull/1020\nwhich moved these items.\n\nSince `0.12.5` this is causing build failures after `cargo update`.\n\n```\n Compiling grpc-build v6.1.0\nerror[E0432]:\n[…]\nenv, Module};\n | ^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^^^^ no `protoc_include_from_env` in the root\n | |\n | no `protoc_from_env` in the root\n```",
"is_bot": false,
"headline": "fix(prost-build): re-export `error_message_protoc_not_found`, `protoc…",
"author_name": "Ethan Brierley",
"author_login": "eopb",
"committed_at": "2024-05-17T15:03:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "26405ab8754219f101f489fe7bb2b74432b9b4b8",
"body": "The release of version 0.12.5 is blocked because of a build error of the packed crate. prost/src/lib.rs refers to a README file that is outside of the published crate.\n\nDuplicate the main README into the prost crate to unblock the release",
"is_bot": false,
"headline": "fix: Duplicate README to fix release (#1052)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-08T17:30:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "548739ac15b052f8d27e261064616b0398b32b20",
"body": "_PROST!_ is a [Protocol Buffers](https://developers.google.com/protocol-buffers/) implementation for the [Rust Language](https://www.rust-lang.org/). `prost` generates simple, idiomatic Rust code from `proto2` and `proto3` files.\n\nThis patch update brings new fixes:\n\n- fix: include_file should handl\n[…]\nrks (#1037)\n- chore: Update internal crates to Rust edition 2021 (#1039)\n- chore: Update crate descriptions (#1038)\n- chore: Fix clippy checks in CI (#1032)\n- chore: Add Casper Meijn as author (#1025)",
"is_bot": false,
"headline": "chore: Release version 0.12.5 (#1050)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-08T16:41:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "baddf9828596bb7e2b908f5d4997542ebe59a7c3",
"body": "* fix #1001 and add tests\n\n* add alloc:: imports\n\n* rewrite write_includes to allow for empty modules.\n\n* create test fixture for `write_includes`\n\n* fix lints, remove line feeds\n\n* fixes after merge master\n\n* remove some duplicate tests and alter existing ones to test write_includes\n\n* more test\n\n* module.rs Module::starts_with visibility",
"is_bot": false,
"headline": "fix: include_file should handle proto without package (#1002)",
"author_name": "Maxi Barmetler",
"author_login": "MixusMinimax",
"committed_at": "2024-05-05T19:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f38ea600478bf22b0b812cc788553a9e3019531",
"body": "* prost-build: CodeGenerator::boxed method\n\nA helper method to capture the logic of deciding whether a field\nneeds to be boxed. This follows the pattern with other methods like\n`optional`, and will allow reusing the logic in the upcoming builder\ncodegen.\n\n* prost-build: more reuse with CodeGenerator\n[…]\nt-build: document CodeGenerator::boxed\n\n* prost-build: only emit warning on repeated fields\n\nCo-authored-by: Casper Meijn <casper@meijn.net>\n\n---------\n\nCo-authored-by: Casper Meijn <casper@meijn.net>",
"is_bot": false,
"headline": "prost-build: `CodeGenerator::boxed` method (#1019)",
"author_name": "Mikhail Zabaluev",
"author_login": "mzabaluev",
"committed_at": "2024-05-05T19:28:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2308ba466650ebdc8c865fdbda98a2efa9963274",
"body": "the badge image has been incorrect and not reflective of CI status since august 2023 (9c877ce32ec0c465e437144c1bf4a27cb3aa705c).",
"is_bot": false,
"headline": "fix the link and badge for CI (#1049)",
"author_name": "Kent Ross",
"author_login": "mumbleskates",
"committed_at": "2024-05-05T19:20:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71b8e8e8042b4a544158932304c6be03c06b9b2a",
"body": "* tests: Remove unused dependencies\n\nFound these unused dependencies using: `cargo +nightly udeps && cargo +nightly udeps --all-targets`\n\n* ci: Add cargo-udeps",
"is_bot": false,
"headline": "tests: Remove unused dependencies (#1043)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-05-03T08:40:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "680a2e19c77a1ca7559373f383e5cb3422174ab3",
"body": "* prost-build: consolidate message field data\n\nWhen massaging field data in CodeGenerator::append_message,\nmove it into lists of Field and OneofField structs so that later\ngeneration passes can operate on the data with less code duplication.\n\nSubsidiary append_* methods are changed to take reference\n[…]\nreuse of Field\n\nMake rust_field into a method computing the name on the fly.\nIn OneofField, make the vector of fields to have Field members.\nDon't play reference renaming tricks with field.descriptor.",
"is_bot": false,
"headline": "style(prost-build): Consolidate field data into struct (#1017)",
"author_name": "Mikhail Zabaluev",
"author_login": "mzabaluev",
"committed_at": "2024-04-29T17:28:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "43753be89764ace6d6c2497e61d6ba8d043f6b89",
"body": null,
"is_bot": false,
"headline": "style: Fix toml indent (#1048)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-04-29T16:58:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f2536b28119fe6b91e29eeb18db7de5af281ae1",
"body": null,
"is_bot": false,
"headline": "chore - codegen: `Syntax` to a separate file (#1029)",
"author_name": "Gabriel Hansson",
"author_login": "gibbz00",
"committed_at": "2024-04-28T17:30:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee96a0430787e208ba41bc5af9304e2618e585ed",
"body": null,
"is_bot": false,
"headline": "fix: #1021 (#1022)",
"author_name": "Gabriel Hansson",
"author_login": "gibbz00",
"committed_at": "2024-04-28T17:29:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b607e9bec3d69d35e37127e76226bb5aacee5425",
"body": "Many tests from `prost-build` wrote to the same temporary directory. Therefore these tests overwrite each other files. Because `cargo test` runs multi threaded some tests failed sometimes.",
"is_bot": false,
"headline": "tests: Create a separate tempdir for each test (#1044)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-04-28T17:27:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a21d90c189e2bcd1b5c056232c7a991975957b88",
"body": "The published crates were already using edition 2021. Update all internal crates as well.\n\nAlso add a new tests-2018 crate that runs all tests using edition 2018.",
"is_bot": false,
"headline": "chore: Update internal crates to Rust edition 2021 (#1039)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-04-28T17:26:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95dcb0eae8bb019aa3cd2494311d63ab5780ade6",
"body": "Each published crate should have a unique description.",
"is_bot": false,
"headline": "chore: Update crate descriptions (#1038)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-04-28T11:38:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "691454307ccd2de4c780438da8acf2a1ddd994f6",
"body": "Co-authored-by: Casper Meijn <casper@meijn.net>",
"is_bot": false,
"headline": "ci: Add TOML validation with `taplo` (#1034)",
"author_name": "Gabriel Hansson",
"author_login": "gibbz00",
"committed_at": "2024-04-26T09:12:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a53ad5173f3b64bdd2faf4ef8c99efc5ab8d6b30",
"body": "…030)",
"is_bot": false,
"headline": "prost_build: `BytesType and MapType` into a `collections` module. (#1…",
"author_name": "Gabriel Hansson",
"author_login": "gibbz00",
"committed_at": "2024-04-26T08:04:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fc736ef7840ad986e7f6e185c242489e97f3400",
"body": "The dataset for these benchmarks are not distributed in upstream protobuf. Therefore they fail when running `cargo bench --workspace`.\n\nFixes #1005\n\nOpen question:\n- Are these datasets available for download? If yes, we could add them to the repo.",
"is_bot": false,
"headline": "Remove GoogleMessage3 and GoogleMessage4 benchmarks (#1037)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-04-23T14:16:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "215ae16f4a2826444d285e99f0733d0f82955751",
"body": "…1033)\n\nRemoves the need to always specify append `--workspace` in the common\ncargo commands.\n\n`rust-analyser` seems to get confused and locks the workspace longer\nthan needed under the previous structure. (Lots of `Blocking waiting\nfor file lock on build directory` waiting.) Unable to find an issue\n[…]\naged. Examples:\n\n* Consolidate crate package metadata, dependency versions and clippy\nlints in the workspace `Cargo.toml`\n\n* Placing all crates in a `crates/` for automatic workspace member\ninclucion.",
"is_bot": false,
"headline": "chore: separate prost `Cargo.toml` workspace and crate declaration (#…",
"author_name": "Gabriel Hansson",
"author_login": "gibbz00",
"committed_at": "2024-04-22T14:20:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0381b93fcbb3301411590a8927f4157b2f09816a",
"body": null,
"is_bot": false,
"headline": "chore - codegen: extract c string escaping to a separate file (#1028)",
"author_name": "Gabriel Hansson",
"author_login": "gibbz00",
"committed_at": "2024-04-19T13:51:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30b22d38f0d29bed2bca6a1cac1a9051fdd2443f",
"body": "…iles (#1020)\n\n* build: split `Config` into a separate module\n\n* build: split `Module` into a separate module",
"is_bot": false,
"headline": "prost-build: Split `Config` and `Module` into a separate module and f…",
"author_name": "Gabriel Hansson",
"author_login": "gibbz00",
"committed_at": "2024-04-19T13:50:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eee2de02446d6530ded45159d816b921651539f9",
"body": "* chore: Fix needless borrow\n\n* ci: Clippy requires checking out submodules\n\n* ci: Exclude `protobuf` project from clippy",
"is_bot": false,
"headline": "chore: Fix clippy checks in CI (#1032)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-04-19T13:21:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3deaa200b3a5500bf0403325d02716973b7296a",
"body": "Instead of downloading a tarball, use a submodule to get the protobuf sources. Newer versions of protobuf require recursive submodules for its dependencies",
"is_bot": false,
"headline": "build: Use git submodule to download protobuf sources (#1014)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-04-12T19:05:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95e2658bbce80d1f9ebeec6340cb19c039c1873d",
"body": null,
"is_bot": false,
"headline": "chore: Add Casper Meijn as author (#1025)",
"author_name": "Casper Meijn",
"author_login": "caspermeijn",
"committed_at": "2024-04-12T12:52:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04be6049ea676dde5dfac8a21da2559f4f380ed2",
"body": "* prost: clarify encoding test buffer copying:\n\nfixes `noop_method_call` clippy lint warning.\n\n* ci: add lint checking step:\n\n* Makes that the entrire workspace is checked, but tests too.\n\n* chore: fix `needless_borrow` lints\n\n* chore: fix `needless_return` lints\n\n* chore: remove noop clippy allows\n\n[…]\nts\n\n* chore: fix `unnecessary_cast` lints\n\n* chore: fix `slow_vector_initialization` lints\n\n* chore: fix `assigning_clones` lints\n\n* chore: fix `unused_import` lints\n\n* chore: fix `single_match` lints",
"is_bot": false,
"headline": "Fix clippy warnings and enable clippy in CI (#1008)",
"author_name": "Gabriel Hansson",
"author_login": "gibbz00",
"committed_at": "2024-04-09T15:05:33Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 2,
"commits_last_year": 0,
"latest_release_at": "2024-12-06T15:17:23Z",
"latest_release_tag": "v0.13.4",
"releases_from_tags": true,
"days_since_last_push": 21,
"active_weeks_last_year": 0,
"days_since_latest_release": 597,
"mean_days_between_releases": 97.8
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "prost",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"protobuf",
"serialization",
"encoding"
],
"ecosystem": "crates",
"matches_repo": false,
"registry_url": "https://crates.io/crates/prost",
"is_deprecated": false,
"latest_version": "0.14.4",
"repository_url": "https://github.com/tokio-rs/prost",
"versions_count": 46,
"total_downloads": 504111032,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 40093253,
"first_published_at": "2017-06-25T07:39:15.991516Z",
"latest_published_at": "2026-06-07T10:13:40.918481Z",
"latest_version_yanked": false,
"days_since_latest_publish": 49
},
{
"name": "protobuf",
"exists": true,
"license": "BSD-3-Clause",
"keywords": [],
"ecosystem": "crates",
"matches_repo": null,
"registry_url": "https://crates.io/crates/protobuf",
"is_deprecated": false,
"latest_version": "3.7.2",
"repository_url": null,
"versions_count": 177,
"total_downloads": 162263641,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 12090138,
"first_published_at": "2014-11-21T00:30:41.855088Z",
"latest_published_at": "2026-07-09T21:37:34.405786Z",
"latest_version_yanked": false,
"days_since_latest_publish": 16
},
{
"name": "conformance",
"exists": true,
"license": "MIT OR Apache-2.0",
"keywords": [
"serde",
"conformance",
"testing",
"development-tools::testing"
],
"ecosystem": "crates",
"matches_repo": false,
"registry_url": "https://crates.io/crates/conformance",
"is_deprecated": false,
"latest_version": "0.2.0",
"repository_url": "https://github.com/CAD97/tinyc/tree/master/crates/conformance",
"versions_count": 2,
"total_downloads": 3258,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 6,
"first_published_at": "2019-10-04T21:22:24.766678Z",
"latest_published_at": "2019-10-10T17:37:40.401696Z",
"latest_version_yanked": false,
"days_since_latest_publish": 2481
},
{
"name": "prost-build",
"exists": true,
"license": "Apache-2.0",
"keywords": [],
"ecosystem": "crates",
"matches_repo": false,
"registry_url": "https://crates.io/crates/prost-build",
"is_deprecated": false,
"latest_version": "0.14.4",
"repository_url": "https://github.com/tokio-rs/prost",
"versions_count": 47,
"total_downloads": 312813431,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 22054618,
"first_published_at": "2017-06-25T07:40:34.848805Z",
"latest_published_at": "2026-06-07T10:14:03.681322Z",
"latest_version_yanked": false,
"days_since_latest_publish": 49
},
{
"name": "prost-types",
"exists": true,
"license": "Apache-2.0",
"keywords": [],
"ecosystem": "crates",
"matches_repo": false,
"registry_url": "https://crates.io/crates/prost-types",
"is_deprecated": false,
"latest_version": "0.14.4",
"repository_url": "https://github.com/tokio-rs/prost",
"versions_count": 42,
"total_downloads": 395386075,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 29327814,
"first_published_at": "2017-09-10T19:19:37.407643Z",
"latest_published_at": "2026-06-07T10:13:51.361558Z",
"latest_version_yanked": false,
"days_since_latest_publish": 49
},
{
"name": "prost-derive",
"exists": true,
"license": "Apache-2.0",
"keywords": [],
"ecosystem": "crates",
"matches_repo": false,
"registry_url": "https://crates.io/crates/prost-derive",
"is_deprecated": false,
"latest_version": "0.14.4",
"repository_url": "https://github.com/tokio-rs/prost",
"versions_count": 42,
"total_downloads": 495163187,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 38534055,
"first_published_at": "2017-06-25T07:38:48.366541Z",
"latest_published_at": "2026-06-07T10:13:30.605513Z",
"latest_version_yanked": false,
"days_since_latest_publish": 49
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": true,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"prost-build/src/fixtures/alphabet/a.proto",
"prost-build/src/fixtures/alphabet/b.proto",
"prost-build/src/fixtures/alphabet/c.proto",
"prost-build/src/fixtures/alphabet/d.proto",
"prost-build/src/fixtures/alphabet/e.proto",
"prost-build/src/fixtures/alphabet/f.proto",
"prost-build/src/fixtures/field_attributes/field_attributes.proto",
"prost-build/src/fixtures/helloworld/goodbye.proto",
"prost-build/src/fixtures/helloworld/hello.proto",
"prost-build/src/fixtures/helloworld/types.proto",
"prost-build/src/fixtures/imports_empty/imports_empty.proto",
"prost-build/src/fixtures/smoke_test/smoke_test.proto",
"tests/single-include/protos/outdir.proto",
"tests/single-include/protos/search.proto",
"tests/src/boxed_field.proto",
"tests/src/custom_attributes.proto",
"tests/src/custom_debug.proto",
"tests/src/default_enum_value.proto",
"tests/src/default_string_escape.proto",
"tests/src/deprecated_field.proto",
"tests/src/derive_copy.proto",
"tests/src/enum_keyword_variant.proto",
"tests/src/groups.proto",
"tests/src/ident_conversion.proto",
"tests/src/include/google/protobuf/any.proto",
"tests/src/include/google/protobuf/api.proto",
"tests/src/include/google/protobuf/compiler/plugin.proto",
"tests/src/include/google/protobuf/descriptor.proto",
"tests/src/include/google/protobuf/duration.proto",
"tests/src/include/google/protobuf/empty.proto",
"tests/src/include/google/protobuf/field_mask.proto",
"tests/src/include/google/protobuf/source_context.proto",
"tests/src/include/google/protobuf/struct.proto",
"tests/src/include/google/protobuf/timestamp.proto",
"tests/src/include/google/protobuf/type.proto",
"tests/src/include/google/protobuf/wrappers.proto",
"tests/src/invalid_doctest.proto",
"tests/src/nesting.proto",
"tests/src/no_package.proto",
"tests/src/no_root_packages/gizmo.proto",
"tests/src/no_root_packages/root.proto",
"tests/src/no_root_packages/widget.proto",
"tests/src/no_root_packages/widget_factory.proto",
"tests/src/no_shadowed_types.proto",
"tests/src/no_unused_results.proto",
"tests/src/oneof_attributes.proto",
"tests/src/option_enum.proto",
"tests/src/option_struct.proto",
"tests/src/packages/gizmo.proto",
"tests/src/packages/root.proto",
"tests/src/packages/widget.proto",
"tests/src/packages/widget_factory.proto",
"tests/src/proto3_presence.proto",
"tests/src/recursive_oneof.proto",
"tests/src/result_enum.proto",
"tests/src/result_struct.proto",
"tests/src/submessage_without_package.proto",
"tests/src/type_names.proto",
"tests/src/well_known_types.proto",
"third_party/old_protobuf_benchmarks/benchmarks.proto",
"third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto",
"third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto",
"third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto"
],
"has_devcontainer": true,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml",
"benchmarks/Cargo.toml",
"conformance/Cargo.toml",
"fuzz/Cargo.toml",
"fuzz/afl/proto3/Cargo.toml",
"prost-build/Cargo.toml",
"prost-derive/Cargo.toml",
"prost-types/Cargo.toml",
"prost/Cargo.toml",
"protobuf/Cargo.toml",
"tests-2015/Cargo.toml",
"tests-2018/Cargo.toml",
"tests-no-std/Cargo.toml",
"tests/Cargo.toml",
"tests/single-include/Cargo.toml"
],
"largest_source_bytes": 94767,
"source_files_sampled": 84,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml",
"benchmarks/Cargo.toml",
"conformance/Cargo.toml",
"fuzz/Cargo.toml",
"prost-build/Cargo.toml",
"prost-derive/Cargo.toml",
"prost-types/Cargo.toml",
"prost/Cargo.toml",
"protobuf/Cargo.toml",
"tests-2015/Cargo.toml",
"tests-2018/Cargo.toml",
"tests-no-std/Cargo.toml",
"tests/Cargo.toml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 62,
"malicious_count": 0,
"assessed_package": "crates:prost@0.14.4",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "bytes",
"manifest": "conformance/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "env_logger",
"manifest": "conformance/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.11"
},
{
"name": "prost",
"manifest": "conformance/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "protobuf",
"manifest": "conformance/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tests",
"manifest": "conformance/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "heck",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": ">=0.4, <=0.5"
},
{
"name": "itertools",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": ">=0.10, <=0.13"
},
{
"name": "log",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.4.4"
},
{
"name": "multimap",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": ">=0.8, <=0.10"
},
{
"name": "petgraph",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.6"
},
{
"name": "prost",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.13.3"
},
{
"name": "prost-types",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.13.3"
},
{
"name": "tempfile",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "3"
},
{
"name": "once_cell",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.17.1"
},
{
"name": "regex",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.8.1"
},
{
"name": "prettyplease",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.2"
},
{
"name": "syn",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2"
},
{
"name": "pulldown-cmark",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.12"
},
{
"name": "pulldown-cmark-to-cmark",
"manifest": "prost-build/Cargo.toml",
"ecosystem": "crates",
"version_constraint": ">=16, <=17"
},
{
"name": "anyhow",
"manifest": "prost-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.1"
},
{
"name": "itertools",
"manifest": "prost-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": ">=0.10.1, <=0.13"
},
{
"name": "proc-macro2",
"manifest": "prost-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.60"
},
{
"name": "quote",
"manifest": "prost-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "syn",
"manifest": "prost-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2"
},
{
"name": "prost",
"manifest": "prost-types/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.13.3"
},
{
"name": "bytes",
"manifest": "prost/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "prost-derive",
"manifest": "prost/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.13.3"
},
{
"name": "prost",
"manifest": "protobuf/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "prost-types",
"manifest": "protobuf/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "anyhow",
"manifest": "tests-2015/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.1"
},
{
"name": "cfg-if",
"manifest": "tests-2015/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "prost",
"manifest": "tests-2015/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "prost-types",
"manifest": "tests-2015/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "protobuf",
"manifest": "tests-2015/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "anyhow",
"manifest": "tests-2018/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.1"
},
{
"name": "bytes",
"manifest": "tests-2018/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "cfg-if",
"manifest": "tests-2018/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "prost",
"manifest": "tests-2018/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "prost-types",
"manifest": "tests-2018/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "protobuf",
"manifest": "tests-2018/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "anyhow",
"manifest": "tests-no-std/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.45"
},
{
"name": "cfg-if",
"manifest": "tests-no-std/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "prost",
"manifest": "tests-no-std/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "prost-types",
"manifest": "tests-no-std/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 10
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "danburkert",
"commits": 313,
"avatar_url": "https://avatars.githubusercontent.com/u/160242?v=4"
},
{
"type": "User",
"login": "caspermeijn",
"commits": 74,
"avatar_url": "https://avatars.githubusercontent.com/u/1286074?v=4"
},
{
"type": "User",
"login": "LucioFranco",
"commits": 48,
"avatar_url": "https://avatars.githubusercontent.com/u/5758045?v=4"
},
{
"type": "User",
"login": "tottoto",
"commits": 19,
"avatar_url": "https://avatars.githubusercontent.com/u/16907501?v=4"
},
{
"type": "User",
"login": "gibbz00",
"commits": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/31696304?v=4"
},
{
"type": "User",
"login": "briansmith",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/16816?v=4"
},
{
"type": "User",
"login": "mumbleskates",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/6464813?v=4"
},
{
"type": "User",
"login": "neoeinstein",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/18165?v=4"
},
{
"type": "User",
"login": "mzabaluev",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/1198919?v=4"
},
{
"type": "User",
"login": "ldm0",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/31354274?v=4"
}
],
"contributors_sampled": 99,
"top_contributor_share": 0.514
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"cifuzz.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 20 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "9ed944eb633480079037dfceeee61aac6cd0c94f",
"ran_at": "2026-07-26T20:46:59Z",
"aggregate_score": 4.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/caspermeijn/prost",
"host": "github.com",
"name": "prost",
"owner": "caspermeijn"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"security": 58,
"vitality": 37,
"community": 34,
"governance": 47,
"engineering": 36
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 37,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"commits_last_year": 0,
"human_commit_share": 0.94,
"days_since_last_push": 21,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 21 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 21
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"releases_count": 2,
"latest_release_tag": "v0.13.4",
"releases_from_tags": true,
"days_since_latest_release": 597,
"mean_days_between_releases": 97.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 597 days ago",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 597
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~97.8 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 97.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "dormant",
"guards": [
"no_open_demand",
"dependencies_clean"
],
"signals": [
"release_stall",
"scorecard_unmaintained",
"sole_maintainer_gone"
],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 673,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 673 days, with nothing left unanswered; held at dormant by nothing open to answer, no affected dependency",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_quiet",
"params": {
"days": 673
}
},
{
"code": "abandonment_guarded",
"params": {
"guards": "nothing open to answer, no affected dependency"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 34,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"packages": [
"protobuf"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 162263641,
"monthly_downloads": 12090138
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "12,090,138 downloads/month across crates",
"points": 80,
"status": "met",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 12090138,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 47,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 99,
"top_contributor_share": 0.514
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 51% of commits",
"points": 10.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 51
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "99 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 99
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 20 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 10
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "0/10 decided PRs merged",
"points": 0,
"status": "missed",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 0,
"decided": 10
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 54,
"inputs": {
"followers": 13,
"owner_type": "User",
"is_verified": null,
"owner_login": "caspermeijn",
"public_repos": 105,
"account_age_days": 5326
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "13 followers of caspermeijn",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 13,
"login": "caspermeijn"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "105 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 105
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"protobuf"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 16
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 16 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 16
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "177 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 177
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 36,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "critical",
"name": "Documentation",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": false,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 58,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 47,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 20 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the crates:prost@0.14.4 runtime dependency closure — what installing the published package pulls in — 62 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "crates:prost@0.14.4",
"assessed": 62
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 62,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 62,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 11
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "94 of 94 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 94,
"sampled": 94
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_nix": true,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": true,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"Cargo.toml",
"benchmarks/Cargo.toml",
"conformance/Cargo.toml",
"fuzz/Cargo.toml",
"fuzz/afl/proto3/Cargo.toml",
"prost-build/Cargo.toml",
"prost-derive/Cargo.toml",
"prost-types/Cargo.toml",
"prost/Cargo.toml",
"protobuf/Cargo.toml",
"tests-2015/Cargo.toml",
"tests-2018/Cargo.toml",
"tests-no-std/Cargo.toml",
"tests/Cargo.toml",
"tests/single-include/Cargo.toml"
],
"dependency_bot_commit_share": 0.06
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Cargo.toml, benchmarks/Cargo.toml, conformance/Cargo.toml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "Cargo.toml, benchmarks/Cargo.toml, conformance/Cargo.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "devcontainer, Nix",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "devcontainer, Nix"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "6 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 6,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 94767,
"source_files_sampled": 84,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/84 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 84,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"prost-build/src/fixtures/alphabet/a.proto",
"prost-build/src/fixtures/alphabet/b.proto",
"prost-build/src/fixtures/alphabet/c.proto",
"prost-build/src/fixtures/alphabet/d.proto",
"prost-build/src/fixtures/alphabet/e.proto",
"prost-build/src/fixtures/alphabet/f.proto",
"prost-build/src/fixtures/field_attributes/field_attributes.proto",
"prost-build/src/fixtures/helloworld/goodbye.proto",
"prost-build/src/fixtures/helloworld/hello.proto",
"prost-build/src/fixtures/helloworld/types.proto",
"prost-build/src/fixtures/imports_empty/imports_empty.proto",
"prost-build/src/fixtures/smoke_test/smoke_test.proto",
"tests/single-include/protos/outdir.proto",
"tests/single-include/protos/search.proto",
"tests/src/boxed_field.proto",
"tests/src/custom_attributes.proto",
"tests/src/custom_debug.proto",
"tests/src/default_enum_value.proto",
"tests/src/default_string_escape.proto",
"tests/src/deprecated_field.proto",
"tests/src/derive_copy.proto",
"tests/src/enum_keyword_variant.proto",
"tests/src/groups.proto",
"tests/src/ident_conversion.proto",
"tests/src/include/google/protobuf/any.proto",
"tests/src/include/google/protobuf/api.proto",
"tests/src/include/google/protobuf/compiler/plugin.proto",
"tests/src/include/google/protobuf/descriptor.proto",
"tests/src/include/google/protobuf/duration.proto",
"tests/src/include/google/protobuf/empty.proto",
"tests/src/include/google/protobuf/field_mask.proto",
"tests/src/include/google/protobuf/source_context.proto",
"tests/src/include/google/protobuf/struct.proto",
"tests/src/include/google/protobuf/timestamp.proto",
"tests/src/include/google/protobuf/type.proto",
"tests/src/include/google/protobuf/wrappers.proto",
"tests/src/invalid_doctest.proto",
"tests/src/nesting.proto",
"tests/src/no_package.proto",
"tests/src/no_root_packages/gizmo.proto",
"tests/src/no_root_packages/root.proto",
"tests/src/no_root_packages/widget.proto",
"tests/src/no_root_packages/widget_factory.proto",
"tests/src/no_shadowed_types.proto",
"tests/src/no_unused_results.proto",
"tests/src/oneof_attributes.proto",
"tests/src/option_enum.proto",
"tests/src/option_struct.proto",
"tests/src/packages/gizmo.proto",
"tests/src/packages/root.proto",
"tests/src/packages/widget.proto",
"tests/src/packages/widget_factory.proto",
"tests/src/proto3_presence.proto",
"tests/src/recursive_oneof.proto",
"tests/src/result_enum.proto",
"tests/src/result_struct.proto",
"tests/src/submessage_without_package.proto",
"tests/src/type_names.proto",
"tests/src/well_known_types.proto",
"third_party/old_protobuf_benchmarks/benchmarks.proto",
"third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto",
"third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto",
"third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "prost-build/src/fixtures/alphabet/a.proto, prost-build/src/fixtures/alphabet/b.proto, prost-build/src/fixtures/alphabet/c.proto, prost-build/src/fixtures/alphabet/d.proto, prost-build/src/fixtures/alphabet/e.proto, prost-build/src/fixtures/alphabet/f.proto, prost-build/src/fixtures/field_attributes/field_attributes.proto, prost-build/src/fixtures/helloworld/goodbye.proto, prost-build/src/fixtures/helloworld/hello.proto, prost-build/src/fixtures/helloworld/types.proto, prost-build/src/fixtures/imports_empty/imports_empty.proto, prost-build/src/fixtures/smoke_test/smoke_test.proto, tests/single-include/protos/outdir.proto, tests/single-include/protos/search.proto, tests/src/boxed_field.proto, tests/src/custom_attributes.proto, tests/src/custom_debug.proto, tests/src/default_enum_value.proto, tests/src/default_string_escape.proto, tests/src/deprecated_field.proto, tests/src/derive_copy.proto, tests/src/enum_keyword_variant.proto, tests/src/groups.proto, tests/src/ident_conversion.proto, tests/src/include/google/protobuf/any.proto, tests/src/include/google/protobuf/api.proto, tests/src/include/google/protobuf/compiler/plugin.proto, tests/src/include/google/protobuf/descriptor.proto, tests/src/include/google/protobuf/duration.proto, tests/src/include/google/protobuf/empty.proto, tests/src/include/google/protobuf/field_mask.proto, tests/src/include/google/protobuf/source_context.proto, tests/src/include/google/protobuf/struct.proto, tests/src/include/google/protobuf/timestamp.proto, tests/src/include/google/protobuf/type.proto, tests/src/include/google/protobuf/wrappers.proto, tests/src/invalid_doctest.proto, tests/src/nesting.proto, tests/src/no_package.proto, tests/src/no_root_packages/gizmo.proto, tests/src/no_root_packages/root.proto, tests/src/no_root_packages/widget.proto, tests/src/no_root_packages/widget_factory.proto, tests/src/no_shadowed_types.proto, tests/src/no_unused_results.proto, tests/src/oneof_attributes.proto, tests/src/option_enum.proto, tests/src/option_struct.proto, tests/src/packages/gizmo.proto, tests/src/packages/root.proto, tests/src/packages/widget.proto, tests/src/packages/widget_factory.proto, tests/src/proto3_presence.proto, tests/src/recursive_oneof.proto, tests/src/result_enum.proto, tests/src/result_struct.proto, tests/src/submessage_without_package.proto, tests/src/type_names.proto, tests/src/well_known_types.proto, third_party/old_protobuf_benchmarks/benchmarks.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto, third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "prost-build/src/fixtures/alphabet/a.proto, prost-build/src/fixtures/alphabet/b.proto, prost-build/src/fixtures/alphabet/c.proto, prost-build/src/fixtures/alphabet/d.proto, prost-build/src/fixtures/alphabet/e.proto, prost-build/src/fixtures/alphabet/f.proto, prost-build/src/fixtures/field_attributes/field_attributes.proto, prost-build/src/fixtures/helloworld/goodbye.proto, prost-build/src/fixtures/helloworld/hello.proto, prost-build/src/fixtures/helloworld/types.proto, prost-build/src/fixtures/imports_empty/imports_empty.proto, prost-build/src/fixtures/smoke_test/smoke_test.proto, tests/single-include/protos/outdir.proto, tests/single-include/protos/search.proto, tests/src/boxed_field.proto, tests/src/custom_attributes.proto, tests/src/custom_debug.proto, tests/src/default_enum_value.proto, tests/src/default_string_escape.proto, tests/src/deprecated_field.proto, tests/src/derive_copy.proto, tests/src/enum_keyword_variant.proto, tests/src/groups.proto, tests/src/ident_conversion.proto, tests/src/include/google/protobuf/any.proto, tests/src/include/google/protobuf/api.proto, tests/src/include/google/protobuf/compiler/plugin.proto, tests/src/include/google/protobuf/descriptor.proto, tests/src/include/google/protobuf/duration.proto, tests/src/include/google/protobuf/empty.proto, tests/src/include/google/protobuf/field_mask.proto, tests/src/include/google/protobuf/source_context.proto, tests/src/include/google/protobuf/struct.proto, tests/src/include/google/protobuf/timestamp.proto, tests/src/include/google/protobuf/type.proto, tests/src/include/google/protobuf/wrappers.proto, tests/src/invalid_doctest.proto, tests/src/nesting.proto, tests/src/no_package.proto, tests/src/no_root_packages/gizmo.proto, tests/src/no_root_packages/root.proto, tests/src/no_root_packages/widget.proto, tests/src/no_root_packages/widget_factory.proto, tests/src/no_shadowed_types.proto, tests/src/no_unused_results.proto, tests/src/oneof_attributes.proto, tests/src/option_enum.proto, tests/src/option_struct.proto, tests/src/packages/gizmo.proto, tests/src/packages/root.proto, tests/src/packages/widget.proto, tests/src/packages/widget_factory.proto, tests/src/proto3_presence.proto, tests/src/recursive_oneof.proto, tests/src/result_enum.proto, tests/src/result_struct.proto, tests/src/submessage_without_package.proto, tests/src/type_names.proto, tests/src/well_known_types.proto, third_party/old_protobuf_benchmarks/benchmarks.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto, third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Community profile unavailable",
"crates package 'prost' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring",
"Could not fetch crates package 'tests-2015' from its registry",
"Could not fetch crates package 'tests-2018' from its registry",
"crates package 'conformance' points at a different repository (https://github.com/CAD97/tinyc/tree/master/crates/conformance); excluded from ecosystem scoring",
"crates package 'prost-build' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring",
"crates package 'prost-types' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring",
"crates package 'prost-derive' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T20:47:14.546868Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/caspermeijn/prost.svg",
"full_name": "caspermeijn/prost",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — crates.io.