Public recordAt Risk
Software health reportschema 0.30.0 · metrics 2.5.0 · 2026-08-04 17:06 UTC
catenacyber / perfsprint
Golang linter to use strconv
catenacyber/perfsprint holds a health index of 24 out of 100, placing it in the At Risk band. It scores highest on Sustainability & Governance (65/100) and lowest on Security (35/100). It was last updated 258 days ago. A single contributor accounts for most of its recent work.
24
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
24
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 49 is calibrated to 48 on the published index scale (record calibration 2026-08-02). High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At Risk ceiling of 34.
Ownership
Catena cyberPersonal account
133 followers115 public repossince Jan 2018
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/catenacyber/perfsprint | v0.10.1 | - | 19 | 270 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
35
Development activity
19Critical
How it's scored
| 3.6/36 | Push recency — last push 258 days ago |
| 4.2/36 | Commit cadence — 6/52 weeks with commits |
| 11.3/18 | Commit volume — 17 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Inputs used
| commits_last_year | 17 |
| human_commit_share | 1 |
| days_since_last_push | 258 |
| active_weeks_last_year | 6 |
Release discipline
58Moderate
How it's scored
| 16.2/27 | Ships releases — 19 version tags (no GitHub releases) |
| 16.2/36 | Release recency — latest release 270 days ago |
| 19.8/27 | Release cadence — a release every ~71.5 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 19 |
| latest_release_tag | v0.10.1 |
| releases_from_tags | yes |
| days_since_latest_release | 270 |
| mean_days_between_releases | 71.5 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
41
Popularity & adoption
34At Risk
How it's scored
| 27/60 | Stars — 47 stars |
| 6.5/25 | Forks — 7 forks |
| 0/15 | Watchers — 2 watchers |
Inputs used
| forks | 7 |
| stars | 47 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| readme_badges | 2 |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| readme_badge_services | github.com, goreportcard.com |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
65
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 7.2/22.5 | Commit distribution — top contributor authored 68% of commits |
| 10.8/13.5 | Contributor breadth — 8 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 7 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 8 |
| top_contributor_share | 0.679 |
Issue & PR responsiveness
80Excellent
How it's scored
| 33/42 | Issue resolution — 79% of issues closed |
| 27.7/30 | PR acceptance — 36/39 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 9/15 | OpenSSF Scorecard: Code-Review — Found 12/18 approved changesets -- score normalized to 6 |
Inputs used
| merged_prs | 36 |
| open_issues | 6 |
| closed_issues | 22 |
| prs_merged_7d | 0 |
| prs_decided_7d | 0 |
| prs_merged_30d | 0 |
| prs_decided_30d | 0 |
| issue_closed_ratio | 0.786 |
| closed_unmerged_prs | 3 |
| first_time_authors_30d | 0 |
| first_time_prs_merged_30d | 0 |
| first_time_prs_decided_30d | 0 |
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
63Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 15.3/25 | Owner reach — 133 followers of catenacyber |
| 25/25 | Track record — 115 public repos, account ~8 yr old |
Inputs used
| followers | 133 |
| owner_type | User |
| is_verified | — |
| owner_login | catenacyber |
| public_repos | 115 |
| account_age_days | 3,113 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
91Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 26/35 | Publish recency — latest publish 270 days ago |
| 20/20 | Version history — 19 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/catenacyber/perfsprint |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 270 |
Engineering Quality
Are baseline engineering and documentation practices in place?
62
Engineering practices
70Good
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yaml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 6/20 | OpenSSF Scorecard: CI-Tests — 7 out of 18 merged PRs checked by a CI test -- score normalized to 3 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
35
Security posture
19Critical
Jurisdiction risk alert
High-risk jurisdiction exposure detected
1 contributor organization profilesRussia1 top contributor profilesRussia
Based on self-published public profile locations. This governance signal does not determine nationality, citizenship, intent, sanctions status, or individual trustworthiness.
How jurisdiction exposure is assessedHow it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0.8/2.5 | CI-Tests — 7 out of 18 merged PRs checked by a CI test -- score normalized to 3 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 4.5/7.5 | Code-Review — Found 12/18 approved changesets -- score normalized to 6 |
| 2.5/2.5 | Contributors — project has 7 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3.8 |
| high_risk_jurisdiction_cap | 34 |
| high_risk_jurisdiction_multiplier | 50 |
| security_posture_after_multiplier | 19 |
| security_posture_before_jurisdiction | 38 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier and gives Security posture an At risk ceiling of 34.
Dependency advisories
100Exceptional
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 3 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 3 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
65
Agent context & guidance
38Weak
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 38.1/40 | Legible commit history — 60 of 84 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.714 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yaml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 84 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Exceptional
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/25 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 27,040 |
| source_files_sampled | 25 |
| oversized_source_files | 0 |
Key facts
47GitHub stars
8contributors
17commits, last 12 months
258days since last push
19releases
1bus factor
6open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 7 ⇿
0Stars
7Forks
14Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 7Patch 7
Each point covers 3 days.
OpenSSF Scorecard 3.8 / 10
3.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 3 | CI-Tests | 7 out of 18 merged PRs checked by a CI test -- score normalized to 3 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 6 | Code-Review | Found 12/18 approved changesets -- score normalized to 6 |
| 10 | Contributors | project has 7 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 1
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | golang.org/x/tools | v0.37.0 | go.mod |
All dependencies 3
Full resolved dependency set from the GitHub dependency graph: 1 direct and 2 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | golang.org/x/tools | 0.37.0 | direct |
| Go | golang.org/x/mod | 0.28.0 | indirect |
| Go | golang.org/x/sync | 0.17.0 | indirect |
Dependency advisories 0
This repository publishes no package the index resolves, so its own dependency graph was assessed — 3 packages, which also include development and test pins that never ship: 0 carry known advisories, of which 0 are direct.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 120,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 38052,
"Makefile": 441
},
"pushed_at": "2025-11-19T03:07:48Z",
"created_at": "2023-03-21T15:10:48Z",
"owner_type": "User",
"updated_at": "2026-07-21T04:50:27Z",
"description": "Golang linter to use strconv",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://catenacyber.fr",
"name": "Catena cyber",
"type": "User",
"login": "catenacyber",
"company": null,
"location": "Orleans, France",
"followers": 133,
"avatar_url": "https://avatars.githubusercontent.com/u/35799796?v=4",
"created_at": "2018-01-25T09:56:36Z",
"is_verified": null,
"public_repos": 115,
"account_age_days": 3113
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2025-11-07T10:07:15Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2025-10-12T20:49:02Z"
},
{
"tag": "v0.9.1",
"kind": "patch",
"published_at": "2025-03-12T20:49:05Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2025-02-26T15:15:50Z"
},
{
"tag": "v0.8.2",
"kind": "patch",
"published_at": "2025-02-18T17:15:31Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2025-02-08T10:40:57Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2025-02-05T13:12:39Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2024-02-19T15:16:52Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2024-02-14T09:22:19Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2024-02-02T21:15:35Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2023-12-13T21:36:02Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2023-12-13T21:19:18Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2023-11-29T14:26:57Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2023-10-25T15:25:56Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2023-10-24T19:04:11Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2023-10-24T10:37:46Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2023-10-24T10:23:28Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2023-10-18T19:03:37Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2023-03-21T15:24:08Z"
}
],
"recent_commits": [
{
"oid": "68e6f368773e414d2ee0075fdf7cb5c2a4cbca49",
"body": null,
"is_bot": false,
"headline": "concat-loop: handle switch/case in loops",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-11-19T03:07:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5cd7f60a6f7c2495726f43b2231403f189cec3c",
"body": "As they were conflicting",
"is_bot": false,
"headline": "analyzer: fix fixes for intricate loop",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-11-07T10:55:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac82f01b46839b2b5441a9352ef3d23ba9927d02",
"body": "in case we have s = somethign that is not \"s + \"",
"is_bot": false,
"headline": "analyzer: add FIXME comment for case in concat-loop",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-11-07T10:07:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "109aa9915300135f7c9c868de9f5eb9be9f70b4c",
"body": null,
"is_bot": false,
"headline": "amend README",
"author_name": "Maria Ines Parnisari",
"author_login": "miparnisari",
"committed_at": "2025-10-18T19:27:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44c6a96eca8d0dc0ec5242491e01b95028dd94a2",
"body": null,
"is_bot": false,
"headline": "analyzer: make perfsprint clean against itself",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-15T19:54:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "154700e3eb80760d285e76d4d7d55d5560812c29",
"body": null,
"is_bot": false,
"headline": "minor improvements",
"author_name": "Maria Ines Parnisari",
"author_login": "miparnisari",
"committed_at": "2025-10-15T19:48:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "749672a0baa8cd2117422d166b355d9cbc22da7f",
"body": "like github.com/pkg/errors and std errors",
"is_bot": false,
"headline": "analyzer: fiximports warns on duplicate names",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "042fecf1a93fca413e128442948b8c2e4f695a45",
"body": null,
"is_bot": false,
"headline": "analyzer: loop-other-ops suboption",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "127a5fcbab12cab09c786e29a836118286f61234",
"body": null,
"is_bot": false,
"headline": "doc: improve readme for suboptions",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e23e886111bdad5915cdae9589baef30c1e1ae0",
"body": null,
"is_bot": false,
"headline": "fiximports: improvements in case we do not deal with fmt",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f84d338fbf68e20d654e453d04164e60163ba97",
"body": null,
"is_bot": false,
"headline": "fiximports: do not fix if strings is already imported",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e04ac263c47c86463ebb82fffe911ed3868023a",
"body": null,
"is_bot": false,
"headline": "analyzer: better code and comments",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffd49e58b11ccb84c8e6638ac70aed4495f21467",
"body": null,
"is_bot": false,
"headline": "analyzer: add FIXME comment in case it looks too complex",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ee5ee5098eec69d7ee39660d40b2728b89ef780",
"body": null,
"is_bot": false,
"headline": "analyzer: handle multiple strings in loop",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a22dab186e58d05e84bc536a62004d819463cdb1",
"body": null,
"is_bot": false,
"headline": "analyzer: better fix all additions for concat-loop",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eace4e7143ea27490a8ae3ecc1749586ff8dee4f",
"body": null,
"is_bot": false,
"headline": "fixup naming and adding",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "258e0777177bdcf5065d43d6c78071ccc84f03eb",
"body": null,
"is_bot": false,
"headline": "analyzer: string concat first implementation",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-10-12T20:49:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "881f41253dbd3d1459f9023d38e08f803e32ad38",
"body": "Fixes #52",
"is_bot": false,
"headline": "analyzer: fix double percent for strconcat",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2025-03-12T20:49:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64834f753129b803189f372611a6e3dd1a68e709",
"body": null,
"is_bot": false,
"headline": "chore: update tests to check diagnostic message",
"author_name": "ccoVeille",
"author_login": "ccoVeille",
"committed_at": "2025-02-26T15:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e2b5e62109ac10b4cd62d7c67cff5b412bad4ea",
"body": "This will help people to understand where the diagnostic is coming from.\n\nBut also, to easily understand what checker could be deactivated if they want to.\n\nThe change is fully compatible with the current tests.\nIt explains why the tests are not updated in this commit.",
"is_bot": false,
"headline": "feat: add checker name in the diagnostic message",
"author_name": "ccoVeille",
"author_login": "ccoVeille",
"committed_at": "2025-02-26T15:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b89c6e8915fecc87a6c7e8aa86b9ee2ef8235f9",
"body": null,
"is_bot": false,
"headline": "fix: bump x/tools to 0.30.0 to support Go 1.24",
"author_name": "Oleksandr Redko",
"author_login": "alexandear",
"committed_at": "2025-02-18T17:15:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d785f02a6676b0541a82eb3c2d0a889e4c80add",
"body": "An absolute URL is now provided in the diagnostic message.\n\nThe Category field helps to classify the diagnostic message in the documentation.\n\nhttps://pkg.go.dev/golang.org/x/tools/go/analysis#Diagnostic\n\nThe Readme file is not yet updated to add these html anchors.",
"is_bot": false,
"headline": "feat: improve diagnostic",
"author_name": "ccoVeille",
"author_login": "ccoVeille",
"committed_at": "2025-02-17T15:27:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31fa92210a56d36a2de1df6bdbd671799612aa94",
"body": "The idea behind this refactor is to have a better structure for the testdata folder.\n\nIt was unclear that each folder in the testdata folder was about activating or deactivating a setting.\n\nFor example, the folder `bool-format` was about activating the `bool-format` setting.\nBut, `err-error` was about activating the setting.\n\nNow, folder names are more explicit about the setting that is being activated or deactivated.",
"is_bot": false,
"headline": "chore: refactor testdata folder",
"author_name": "ccoVeille",
"author_login": "ccoVeille",
"committed_at": "2025-02-11T15:57:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f136c10ddcb5c24da7b60791fde14aa0598d210",
"body": "The default values for the flags are now linked to perfSprint structure.",
"is_bot": false,
"headline": "chore: link flags and their default values",
"author_name": "ccoVeille",
"author_login": "ccoVeille",
"committed_at": "2025-02-11T14:36:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adcb7c6be5bd5c16e38bcff1ef58ced061aa9b8e",
"body": "The previous commits caused the unit tests to fail.\nThis commit fixes the unit tests and updates the golden files.",
"is_bot": false,
"headline": "chore: fix unit tests and golden files",
"author_name": "ccoVeille",
"author_login": "ccoVeille",
"committed_at": "2025-02-08T10:40:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "816aa53afb4f8ba141a816e3b2c2fad6796af96c",
"body": "The fact a flag can deactivate some other flags must be done after the flags are overloaded in unit tests.\n\nSome unit tests were incorrectly written to fulfill this behavior, they are now failing.",
"is_bot": false,
"headline": "fix: refactor unit tests so they don't depend on previous tests",
"author_name": "ccoVeille",
"author_login": "ccoVeille",
"committed_at": "2025-02-08T10:40:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eff1a840fbdd2402ab9aa9a318fe956c99a4032c",
"body": "* analyzer: add options to cover all cases\r\n\r\ninteger-format\r\nerror-format\r\nbool-format\r\nhex-format\r\nstring-format",
"is_bot": false,
"headline": "analyzer: add options to cover all cases (#42)",
"author_name": "Catena cyber",
"author_login": "catenacyber",
"committed_at": "2025-02-05T13:12:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9131b0576a8df56c5343595a0b761419a14c760",
"body": null,
"is_bot": false,
"headline": "analyzer: refactor value type of neededPackages map",
"author_name": "Oleksandr Redko",
"author_login": "alexandear",
"committed_at": "2024-11-26T21:40:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a34cbe326a6b6cf93780d771650ba390a3298f48",
"body": "Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>",
"is_bot": false,
"headline": "chore: refactor Diagnostic declaration",
"author_name": "Matthieu MOREL",
"author_login": "mmorel-35",
"committed_at": "2024-11-21T16:56:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7c1bb995dbbe6e2b2ccd8064035ef2ec14f4b2a",
"body": null,
"is_bot": false,
"headline": "analyzer: remove redundant if stmts",
"author_name": "Oleksandr Redko",
"author_login": "alexandear",
"committed_at": "2024-11-20T12:43:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33099e0796ba7f5bca54f1c9c53b05c20f460f32",
"body": "* clean up ci\r\n\r\n* Update ci.yml",
"is_bot": false,
"headline": "clean up ci (#35)",
"author_name": "Matthieu MOREL",
"author_login": "mmorel-35",
"committed_at": "2024-11-20T12:35:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f3ce4e8ba59949fd6a4282804a42e3e539cd267",
"body": null,
"is_bot": false,
"headline": "ci: update actions and golangci-lint",
"author_name": "Oleksandr Redko",
"author_login": "alexandear",
"committed_at": "2024-11-19T20:07:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e84fb820eee9ef7e89fc8c6587ddad875ba36c72",
"body": "Updated the installation instructions in the README to use 'go install' instead of 'go get' for installing the 'perfsprint' linter.\r\n'go get' is no longer recommended for installing binaries, and 'go install' should be used for Go version 1.17+.",
"is_bot": false,
"headline": "docs: update installation instructions to use go install",
"author_name": "Maxwel Mazur",
"author_login": "maxwelbm",
"committed_at": "2024-10-23T20:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d2eaecf6b1859a0b8ca6537ab4bc24de5f6de40",
"body": null,
"is_bot": false,
"headline": "analyzer: fix false positive with multiple pos args",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2024-02-19T15:16:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dbf3ce6a74f300ff33995270337a1ba41a0467f",
"body": null,
"is_bot": false,
"headline": "analyzer: use word concatenation rather than addition",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2024-02-14T09:22:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b66013fa8dbdf5540a474aecfed5a925bf99a98f",
"body": null,
"is_bot": false,
"headline": "analyzer: make string concatenation optional",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2024-02-08T20:49:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94b53d906abe32e514fc4bc3e8b1fd5e6542266c",
"body": null,
"is_bot": false,
"headline": "analyzer: make imports fixing optional",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2024-02-02T21:15:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fae648ae9587a4d239c3517a24b7bd3ed995203b",
"body": null,
"is_bot": false,
"headline": "style: simplify assignments using assignment operators",
"author_name": "Oleksandr Redko",
"author_login": "alexandear",
"committed_at": "2024-01-08T12:58:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c553de90c97992aeddd4f45d22b428c925ea78bf",
"body": null,
"is_bot": false,
"headline": "Generic simplification for explicit arg",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-12-13T21:36:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a832b98cc5efde79efb160a83b632914b7ea308",
"body": null,
"is_bot": false,
"headline": "doc: removing comment about goimports",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-12-13T21:36:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c199667c36a9dce869798590e56d8b8e635ab3ee",
"body": null,
"is_bot": false,
"headline": "Optimizes single explicit arg",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-12-13T21:36:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a02dde5ad1c603cfc211e6f099328ea9f300c36d",
"body": null,
"is_bot": false,
"headline": "Fix linting sprintf that uses \"%[1]s\"",
"author_name": "Fraser Waters",
"author_login": "Frassle",
"committed_at": "2023-12-13T21:19:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3ce5b23ea3a5bcb0e842abcb353bb94d0638a3f",
"body": null,
"is_bot": false,
"headline": "analyzer: bail out early if errorf is false",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-11-29T14:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c6a551d1424cbd62c3c94d57a7eca704936a85d",
"body": null,
"is_bot": false,
"headline": "analyzer: bail out early if sprintf1 is false",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-11-29T14:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1369dc863ea035c430dd84cef55d196b7516544c",
"body": null,
"is_bot": false,
"headline": "analyzer: fix case for errorf=false",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-11-29T14:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd93e108de70c45f245786ba400b4b8196bf8ea6",
"body": "Fixes #14",
"is_bot": false,
"headline": "fix: fix imports",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-11-29T14:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cd3ec1a4384b2458c6be55183dc57378329daac",
"body": null,
"is_bot": false,
"headline": "bench: hex.EncodeToString with array being sliced",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-11-29T14:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cd4cff6be2c2c1576e5c6cfecec1d8b4b451bd5",
"body": null,
"is_bot": false,
"headline": "feature: fmt.Sprintf with one argument optimization",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-25T15:25:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c0a424749a5b2e0a24991a0bb4a784cd4b0a339",
"body": null,
"is_bot": false,
"headline": "flag: option to disable errorf",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-25T15:25:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb9d531c375e21566cf31d08580f7403d6c1eadc",
"body": null,
"is_bot": false,
"headline": "style: code reorder",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-25T15:25:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29d8bb0bcfd9842ccdd08a6262380d9bcda9bb55",
"body": "As it is not equivalent in all cases, that is when the error\nis nil",
"is_bot": false,
"headline": "fix: make feature about err.Error() optional",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-25T15:25:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81b20c53711757ba64530a1f6b244b131a3b52cd",
"body": null,
"is_bot": false,
"headline": "fix: have fix match gofmt",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-25T15:25:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc24f10e1bd98e69c4e44fd8019309e6199459e9",
"body": "When one format string has text but only one string argument,\nit can be replaced with string addition\n\nDo not deal yet with %s in the middle where we need two additions",
"is_bot": false,
"headline": "feature: string addition",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-24T19:04:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2f010345a0443db3f51a009eecd1b3416b7105a",
"body": null,
"is_bot": false,
"headline": "fixup! feature: optimize fmt.Sprintf(\"%x\" to strconv.FormatUint",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-24T10:37:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1fb0afe0a24607b8f6e65937a9ef42bc3b6ed49",
"body": "using base 16",
"is_bot": false,
"headline": "feature: optimize fmt.Sprintf(\"%x\" to strconv.FormatUint",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-24T10:23:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b873aa93e5322b21437dd18a094bad2d2ea492b7",
"body": null,
"is_bot": false,
"headline": "bench: report allocations",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-24T09:47:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea8b325cd6f75097103b8c9c9f99902743aea94f",
"body": null,
"is_bot": false,
"headline": "optimization: new optimization for fmt.Errorf(\"constant\")",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-24T09:40:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cce219d9dceb55d690074a2fa009ae57180630c",
"body": null,
"is_bot": false,
"headline": "flag: better documentation",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-24T09:05:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e95837062d16c387050fc9a45fbe0b536a3ec90b",
"body": null,
"is_bot": false,
"headline": "config: adds int conversion option",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-20T13:21:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "943e3b4e8a1d0b1f7b0ab5e31a8356dd695536de",
"body": null,
"is_bot": false,
"headline": "benchmark: adds int with conversion",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-20T13:20:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18f87061773e90f98fd9d24a3f0dbebc9f23bab7",
"body": null,
"is_bot": false,
"headline": "ci: fix golangci version",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-18T19:03:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8cdbded840b0eeb20d1375aaf625fe0c1d7c345",
"body": null,
"is_bot": false,
"headline": "ci: use main branch",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-18T18:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3acf8104fab318fb539d8baeae0b646f87ce79e",
"body": null,
"is_bot": false,
"headline": "comment: fix typo",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-18T18:53:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59344202c9ddf082ac768fa357527241d1477b4e",
"body": null,
"is_bot": false,
"headline": "Rename project to perfsprint",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-18T18:38:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bdffdfb456a1ac3db705b661248aea18364c336",
"body": "Productionization",
"is_bot": false,
"headline": "Merge pull request #1 from Antonboom/productionization",
"author_name": "Catena cyber",
"author_login": "catenacyber",
"committed_at": "2023-10-18T18:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c81d12085014fae46cfb0b4ed46a369c287e3ee2",
"body": null,
"is_bot": false,
"headline": "add benchmarks for fmt.Sprint",
"author_name": "Anton Telyshev",
"author_login": "Antonboom",
"committed_at": "2023-10-18T16:55:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b34efb33c7a3e23c6410a1e919de4ed751855921",
"body": null,
"is_bot": false,
"headline": "early return on verb unquote error",
"author_name": "Anton Telyshev",
"author_login": "Antonboom",
"committed_at": "2023-10-18T14:26:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c7f4357754dd2531154dc14c3e6670622231869",
"body": null,
"is_bot": false,
"headline": "update README",
"author_name": "Anton Telyshev",
"author_login": "Antonboom",
"committed_at": "2023-10-17T20:16:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99a871c8187edc7a576a66d29fa3f9a52d500b89",
"body": null,
"is_bot": false,
"headline": "add more negative test cases",
"author_name": "Anton Telyshev",
"author_login": "Antonboom",
"committed_at": "2023-10-17T20:04:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61b568fd44fced78535e8a5f25fc715659092495",
"body": null,
"is_bot": false,
"headline": "add replacements benchmarking",
"author_name": "Anton Telyshev",
"author_login": "Antonboom",
"committed_at": "2023-10-17T19:40:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "640592a47ff9d2a47f5d02033277e5756fd4b00e",
"body": null,
"is_bot": false,
"headline": "support fmt.Sprint",
"author_name": "Anton Telyshev",
"author_login": "Antonboom",
"committed_at": "2023-10-17T19:29:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07305db375add12b7d1e6ec71a3adbd95e4a5c53",
"body": null,
"is_bot": false,
"headline": "fix binary path; add sanity steps and CI",
"author_name": "Anton Telyshev",
"author_login": "Antonboom",
"committed_at": "2023-10-17T18:26:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b258ef6049d5b6dcce020173c71041c9c57ed0b2",
"body": null,
"is_bot": false,
"headline": "analyzer implementation global refactoring",
"author_name": "Anton Telyshev",
"author_login": "Antonboom",
"committed_at": "2023-10-17T18:03:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27abfc8246b33c5933951760bfc01de27d7802f1",
"body": null,
"is_bot": false,
"headline": "tdd: much more tests",
"author_name": "Anton Telyshev",
"author_login": "Antonboom",
"committed_at": "2023-10-17T14:25:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c47f051eb1e213b4caf7f05e0bbd869b9895361",
"body": null,
"is_bot": false,
"headline": "doc: update README",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-10-09T19:17:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6aea42bc68bcf1ef7ca9285f0f8bea8c09edc6a",
"body": null,
"is_bot": false,
"headline": "strconv: fix more cases like hex.EncodeToString",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-03-31T17:51:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e392f10bc43b87cc2ad9bbba3751a5a7598ec45f",
"body": null,
"is_bot": false,
"headline": "use SuggestedFixes",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-03-27T14:45:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f34db706b363dac862c75cc9545d90d7f7b901c2",
"body": null,
"is_bot": false,
"headline": "doc reword",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-03-21T15:30:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcf51d55c04ee50c444c96b25aeff084c34d61b7",
"body": null,
"is_bot": false,
"headline": "unit tests",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-03-21T15:24:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44f9f819ef46e6dc8a4ead8d8309cae8a735b9c5",
"body": null,
"is_bot": false,
"headline": "fix go.mod",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-03-21T15:12:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c78db7ed73a81804b7d94f73c4c47e68b1a4f39",
"body": null,
"is_bot": false,
"headline": "make a golang linter",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-03-21T15:11:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "786b4d9ce2a75be8f009958eea16e1b53c9d7d24",
"body": null,
"is_bot": false,
"headline": "use rather FormatInt for int64",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-03-21T14:56:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76e8d730d0790fd30e4a02d8490d091dd8d643cd",
"body": null,
"is_bot": false,
"headline": "gotiti: POC for Golang micro-benchmark source rewrite",
"author_name": "Philippe Antoine",
"author_login": "catenacyber",
"committed_at": "2023-03-20T09:36:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24480cf0a8dea216cbf20e387f768192828f3b63",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Catena cyber",
"author_login": "catenacyber",
"committed_at": "2023-03-20T09:33:33Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 19,
"commits_last_year": 17,
"latest_release_at": "2025-11-07T10:07:15Z",
"latest_release_tag": "v0.10.1",
"releases_from_tags": true,
"days_since_last_push": 258,
"active_weeks_last_year": 6,
"days_since_latest_release": 270,
"mean_days_between_releases": 71.5
},
"artifacts": {
"collected": true,
"structure": [
"tree.go_main"
],
"declarations": []
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [
"github.com",
"goreportcard.com"
],
"total": 2,
"header": 2,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/catenacyber/perfsprint",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"categories": [],
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/catenacyber/perfsprint",
"declared_type": null,
"is_deprecated": false,
"latest_version": "v0.10.1",
"repository_url": "https://github.com/catenacyber/perfsprint",
"versions_count": 19,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2025-11-07T10:07:15Z",
"latest_version_yanked": null,
"days_since_latest_publish": 270
}
]
},
"popularity": {
"forks": 7,
"stars": 47,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2023-10-25",
"count": 1
},
{
"date": "2023-12-12",
"count": 1
},
{
"date": "2024-10-18",
"count": 1
},
{
"date": "2024-11-18",
"count": 1
},
{
"date": "2025-09-29",
"count": 1
},
{
"date": "2025-10-09",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_forks": 7
},
"star_history": null,
"open_issues_and_prs": 6
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 27040,
"source_files_sampled": 25,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 3,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "golang.org/x/tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.37.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "golang.org/x/tools",
"direct": true,
"version": "0.37.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "0.28.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "0.17.0",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 3,
"direct_count": 1,
"indirect_count": 2
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 36,
"open_issues": 6,
"closed_ratio": 0.786,
"closed_issues": 22,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "catenacyber",
"commits": 57,
"avatar_url": "https://avatars.githubusercontent.com/u/35799796?v=4"
},
{
"type": "User",
"login": "Antonboom",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/17127404?v=4"
},
{
"type": "User",
"login": "ccoVeille",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/3875889?v=4"
},
{
"type": "User",
"login": "alexandear",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/3228886?v=4"
},
{
"type": "User",
"login": "miparnisari",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/5374887?v=4"
},
{
"type": "User",
"login": "mmorel-35",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/6032561?v=4"
},
{
"type": "User",
"login": "Frassle",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1398274?v=4"
},
{
"type": "User",
"login": "maxwelbm",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/52722027?v=4"
}
],
"contributors_sampled": 8,
"top_contributor_share": 0.679
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": false,
"linter_configs": [
".golangci.yaml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 3,
"reason": "7 out of 18 merged PRs checked by a CI test -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 6,
"reason": "Found 12/18 approved changesets -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 7 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "68e6f368773e414d2ee0075fdf7cb5c2a4cbca49",
"ran_at": "2026-08-04T17:05:43Z",
"aggregate_score": 3.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 0,
"decided_7d": 0,
"merged_30d": 0,
"authors_30d": 0,
"decided_30d": 0,
"sample_size": 39,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 0,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2025-11-19T03:09:08Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2025-11-19T03:07:48Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 28,
"created_at": "2024-07-05T07:52:41Z",
"last_comment_at": "2025-10-12T20:51:46Z",
"last_comment_author": "catenacyber"
},
{
"number": 36,
"created_at": "2024-11-20T20:39:00Z",
"last_comment_at": "2024-11-21T18:59:02Z",
"last_comment_author": "ccoVeille"
},
{
"number": 55,
"created_at": "2025-06-30T08:56:42Z",
"last_comment_at": "2025-07-28T16:42:06Z",
"last_comment_author": "ccoVeille"
},
{
"number": 56,
"created_at": "2025-09-14T04:46:15Z",
"last_comment_at": "2025-11-07T16:01:26Z",
"last_comment_author": "m-ocean-it"
},
{
"number": 57,
"created_at": "2025-09-14T04:52:30Z",
"last_comment_at": "2025-10-12T20:48:50Z",
"last_comment_author": "catenacyber"
},
{
"number": 62,
"created_at": "2025-10-23T19:23:03Z",
"last_comment_at": "2025-10-26T20:42:35Z",
"last_comment_author": "catenacyber"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/catenacyber/perfsprint",
"host": "github.com",
"name": "perfsprint",
"owner": "catenacyber"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "The weighted overall 49 is calibrated to 48 on the published index scale (record calibration 2026-08-02). High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At Risk ceiling of 34.",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 49,
"calibrated": 48,
"calibration": "2026-08-02"
}
},
{
"code": "jurisdiction_overall_adjustment",
"params": {
"cap": 34,
"pct": 50
}
}
],
"value": 24,
"inputs": {
"security": 35,
"vitality": 35,
"community": 41,
"governance": 65,
"calibration": "2026-08-02",
"engineering": 62,
"ai_readiness": 65,
"weighted_overall_raw": 49,
"high_risk_jurisdiction_cap": 34,
"high_risk_jurisdiction_multiplier": 50,
"weighted_overall_before_jurisdiction": 48,
"overall_after_jurisdiction_multiplier": 24
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 35,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 19,
"inputs": {
"commits_last_year": 17,
"human_commit_share": 1,
"days_since_last_push": 258,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 258 days ago",
"points": 3.6,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 258
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "17 commits in the last year",
"points": 11.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 17
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "moderate",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"releases_count": 19,
"latest_release_tag": "v0.10.1",
"releases_from_tags": true,
"days_since_latest_release": 270,
"mean_days_between_releases": 71.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "19 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 19
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 270 days ago",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 270
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~71.5 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 71.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "dormant",
"guards": [
"recent_release",
"dependencies_clean"
],
"signals": [
"scorecard_unmaintained"
],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": 0,
"unanswered_open_issues": 0,
"days_since_last_merged_pr": 258,
"days_since_last_human_commit": 258,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "no human commit for 258 days, with nothing left unanswered; held at dormant by a release within the year, no affected dependency",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_quiet",
"params": {
"days": 258
}
},
{
"code": "abandonment_guarded",
"params": {
"guards": "a release within the year, no affected dependency"
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 41,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"forks": 7,
"stars": 47,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "47 stars",
"points": 27,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 47
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "7 forks",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 7
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 2,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [
"github.com",
"goreportcard.com"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 65,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "weak",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 8,
"top_contributor_share": 0.679
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 68% of commits",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 68
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "8 contributors",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 8
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"merged_prs": 36,
"open_issues": 6,
"closed_issues": 22,
"prs_merged_7d": 0,
"prs_decided_7d": 0,
"prs_merged_30d": 0,
"prs_decided_30d": 0,
"issue_closed_ratio": 0.786,
"closed_unmerged_prs": 3,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "79% of issues closed",
"points": 33,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 79
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "36/39 decided PRs merged",
"points": 27.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 36,
"decided": 39
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 12/18 approved changesets -- score normalized to 6",
"points": 9,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"followers": 133,
"owner_type": "User",
"is_verified": null,
"owner_login": "catenacyber",
"public_repos": 115,
"account_age_days": 3113
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "133 followers of catenacyber",
"points": 15.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 133,
"login": "catenacyber"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "115 public repos, account ~8 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 115
}
},
{
"code": "account_age_years",
"params": {
"years": 8
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 91,
"inputs": {
"packages": [
"github.com/catenacyber/perfsprint"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 270
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 270 days ago",
"points": 26,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 270
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "19 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 19
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 62,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yaml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 18 merged PRs checked by a CI test -- score normalized to 3",
"points": 6,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 35,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier to Security posture and gives it an At Risk ceiling of 34.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "jurisdiction_posture_adjustment",
"params": {
"cap": 34,
"pct": 50
}
}
],
"value": 19,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.8,
"high_risk_jurisdiction_cap": 34,
"high_risk_jurisdiction_multiplier": 50,
"security_posture_after_multiplier": 19,
"security_posture_before_jurisdiction": 38
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 18 merged PRs checked by a CI test -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 12/18 approved changesets -- score normalized to 6",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 7 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 3 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 3
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 3,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 3,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "moderate",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 50,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": true,
"exposures": [
{
"role": "contributor_organization",
"count": 1,
"country": "Russia"
},
{
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 14
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "Russia: contributor_organization (1); Russia: top_contributor (1)",
"points": 50,
"status": "partial",
"details": [
{
"code": "jurisdiction_exposure",
"params": {
"role": "contributor_organization",
"count": 1,
"country": "Russia"
}
},
{
"code": "jurisdiction_exposure_next",
"params": {
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 65,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.714,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "60 of 84 human commits state their intent (structured subject or explanatory body)",
"points": 38.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 60,
"sampled": 84
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yaml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yaml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 84",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 84
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 27040,
"source_files_sampled": 25,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/25 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 25,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"application"
],
"labels": [
"application"
],
"scores": {
"cli": 2,
"library": 3,
"application": 5
},
"primary": "application",
"evidence": [
{
"tier": "structure",
"label": "application",
"source": "tree.go_main",
"weight": 5
},
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 3
},
{
"tier": "description",
"label": "cli",
"source": "description:tool",
"weight": 2
}
],
"artifacts": [],
"confidence": "low",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": false
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-08-04T17:06:02.750243Z",
"schema_version": "0.30.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/catenacyber/perfsprint.svg",
"full_name": "catenacyber/perfsprint",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.30.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.