Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 17:12 UTC

chronolaw / lua-nginx-module

Embed the Power of Lua into NGINX HTTP servers

CNo license detected★ 0 stars⑂ 0 forkssince Nov 2018forkView on GitHub ↗

chronolaw/lua-nginx-module holds a health index of 21 out of 100, placing it in the Critical band. It scores highest on AI Readiness (45/100) and lowest on Community & Adoption (1/100). It was last updated 1244 days ago. A single contributor accounts for most of its recent work.

21
overall / 100
Critical

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

21
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Abandonment Policy applies a 85% multiplier to weighted overall health.

Ownership

ChronoPersonal account
1,062 followers52 public repossince Feb 2013

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

17Critical · 22% of overall
How it's scored
0/36Push recency — last push 1,244 days ago
0/36Commit cadence — 0/52 weeks with commits
0/18Commit volume — 0 commits in the last year
0/10OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Inputs used
commits_last_year0
human_commit_share1
days_since_last_push1,244
active_weeks_last_year0
How it's scored
16.2/27Ships releases — 56 version tags (no GitHub releases)
0/36Release recency — latest release 3,016 days ago
19.8/27Release cadence — a release every ~78.3 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count56
latest_release_tagv0.10.13
releases_from_tagsyes
days_since_latest_release3,016
mean_days_between_releases78.3
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

1Critical · 18% of overall
How it's scored
0/60Stars — 0 stars
0/25Forks — 0 forks
0/15Watchers — 1 watchers
Inputs used
forks0
stars0
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
0/22.5README
0/22.5License — no license file detected
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeno
has_licenseno
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

36At risk · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
4.5/22.5Commit distribution — top contributor authored 80% of commits
13.5/13.5Contributor breadth — 100 contributors
10/10OpenSSF Scorecard: Contributors — project has 26 contributing companies or organizations
Inputs used
bus_factor1
contributors_sampled100
top_contributor_share0.798
How it's scored
0/46.8Issue resolution — no issues or no data
0/38.3PR acceptance — no decided pull requests or no data
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Inputs used
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs0
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
21.8/25Owner reach — 1,062 followers of chronolaw
24.6/25Track record — 52 public repos, account ~13 yr old
Inputs used
followers1,062
owner_typeUser
is_verified
owner_loginchronolaw
public_repos52
account_age_days4,897
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.

Engineering Quality

Are baseline engineering and documentation practices in place?

38At risk · 20% of overall
How it's scored
24/24CI workflows — 1 workflow(s)
0/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — no data
Inputs used
has_ciyes
has_testsno
has_editorconfigno
has_linter_configno
has_precommit_configno
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.

Documentation

50Moderate
How it's scored
0/30README
25/25Documentation directory
15/15Documentation / homepage site — https://openresty.org/
0/10Repository description
0/10Topics
10/10Wiki
Inputs used
topics
has_wikiyes
homepagehttps://openresty.org/
has_readmeno
has_docs_diryes
has_descriptionno

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

30At risk · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — no data
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 26 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
0/2.5License — license file not detected
0/7.5Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6.8/7.5Vulnerabilities — 1 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate3
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

45At risk · 0% of overall
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 94 of 100 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.94
agent_instruction_files
agent_instruction_max_bytes
How it's scored
18/18One-command bootstrap — misc/recv-until-pm/Makefile
0/22Automated tests
0/11Lint / format config
11/11Static type checking — C (statically typed)
0/10Reproducible environment
0/10Demonstrated agent practice — no agent-authored commits among the last 100
0/8Automated maintenance — no automated dependency updates observed
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsno
lockfiles
has_dockerfileno
typed_languageyes
bootstrap_filesmisc/recv-until-pm/Makefile
has_devcontainerno
has_linter_configno
typecheck_configs
agent_commit_share0
toolchain_manifests
dependency_bot_commit_share0
How it's scored
45/45Type-checkable code — C (statically typed)
53.2/55Manageable file sizes — 4/125 source files over 60KB
Inputs used
primary_languageC
largest_source_bytes185,791
source_files_sampled125
oversized_source_files4

Key facts

0GitHub stars
100contributors
0commits, last 12 months
1,244days since last push
56releases
1bus factor
0open issues
package ecosystems

Data collection warnings

  • Community profile unavailable
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

More detail

OpenSSF Scorecard 3.0 / 10
3.0aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-26 17:12 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
n/aCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
10Contributorsproject has 26 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
0Licenselicense file not detected
0Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
9Vulnerabilities1 existing vulnerabilities detected
All dependencies not collected

The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 15124,
      "has_wiki": true,
      "homepage": "https://openresty.org/",
      "languages": {
        "C": 1516231,
        "Lua": 57008,
        "Perl": 13519,
        "Shell": 10075,
        "DTrace": 2269,
        "Python": 665,
        "Makefile": 25
      },
      "pushed_at": "2023-02-28T10:03:47Z",
      "created_at": "2018-11-06T10:15:08Z",
      "owner_type": "User",
      "updated_at": "2022-01-21T05:33:13Z",
      "description": "Embed the Power of Lua into NGINX HTTP servers",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "master",
      "license_spdx_raw": null,
      "primary_language": "C",
      "significant_languages": [
        "C"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Chrono",
      "type": "User",
      "login": "chronolaw",
      "company": null,
      "location": null,
      "followers": 1062,
      "avatar_url": "https://avatars.githubusercontent.com/u/3711407?v=4",
      "created_at": "2013-02-27T02:11:04Z",
      "is_verified": null,
      "public_repos": 52,
      "account_age_days": 4897
    },
    "license": {
      "state": "absent",
      "spdx_id": null,
      "raw_spdx": null,
      "file_present": false,
      "scorecard_found": false,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.10.13",
          "kind": "patch",
          "published_at": "2018-04-22T18:41:56Z"
        },
        {
          "tag": "v0.10.12",
          "kind": "patch",
          "published_at": "2018-04-19T19:33:07Z"
        },
        {
          "tag": "v0.10.11",
          "kind": "patch",
          "published_at": "2017-11-03T22:43:30Z"
        },
        {
          "tag": "v0.10.10",
          "kind": "patch",
          "published_at": "2017-08-09T02:51:56Z"
        },
        {
          "tag": "v0.10.9",
          "kind": "patch",
          "published_at": "2017-08-08T19:26:10Z"
        },
        {
          "tag": "v0.10.8",
          "kind": "patch",
          "published_at": "2017-04-08T21:11:54Z"
        },
        {
          "tag": "v0.10.7",
          "kind": "patch",
          "published_at": "2016-11-04T19:09:18Z"
        },
        {
          "tag": "v0.10.6",
          "kind": "patch",
          "published_at": "2016-08-15T20:54:14Z"
        },
        {
          "tag": "v0.10.5",
          "kind": "patch",
          "published_at": "2016-05-26T02:41:20Z"
        },
        {
          "tag": "v0.10.4",
          "kind": "patch",
          "published_at": "2016-05-17T22:46:09Z"
        },
        {
          "tag": "v0.10.3",
          "kind": "patch",
          "published_at": "2016-05-15T20:42:01Z"
        },
        {
          "tag": "v0.10.2",
          "kind": "patch",
          "published_at": "2016-03-09T04:52:59Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2016-03-09T00:49:55Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2016-01-11T21:58:47Z"
        },
        {
          "tag": "v0.9.20",
          "kind": "patch",
          "published_at": "2015-12-20T05:43:48Z"
        },
        {
          "tag": "v0.9.19",
          "kind": "patch",
          "published_at": "2015-11-11T09:49:24Z"
        },
        {
          "tag": "v0.9.18",
          "kind": "patch",
          "published_at": "2015-11-04T14:42:39Z"
        },
        {
          "tag": "v0.9.17",
          "kind": "patch",
          "published_at": "2015-10-27T09:11:14Z"
        },
        {
          "tag": "v0.9.16",
          "kind": "patch",
          "published_at": "2015-06-23T14:25:43Z"
        },
        {
          "tag": "v0.9.15",
          "kind": "patch",
          "published_at": "2015-02-18T23:29:39Z"
        },
        {
          "tag": "v0.9.14",
          "kind": "patch",
          "published_at": "2015-01-21T22:24:58Z"
        },
        {
          "tag": "v0.9.13",
          "kind": "patch",
          "published_at": "2014-11-22T05:09:29Z"
        },
        {
          "tag": "v0.9.12",
          "kind": "patch",
          "published_at": "2014-09-03T03:48:16Z"
        },
        {
          "tag": "v0.9.11",
          "kind": "patch",
          "published_at": "2014-08-16T20:36:35Z"
        },
        {
          "tag": "v0.9.10",
          "kind": "patch",
          "published_at": "2014-07-08T20:47:41Z"
        },
        {
          "tag": "v0.9.9",
          "kind": "patch",
          "published_at": "2014-07-01T04:21:03Z"
        },
        {
          "tag": "v0.9.8",
          "kind": "patch",
          "published_at": "2014-06-01T04:45:29Z"
        },
        {
          "tag": "v0.9.7",
          "kind": "patch",
          "published_at": "2014-04-07T00:04:11Z"
        },
        {
          "tag": "v0.9.6",
          "kind": "patch",
          "published_at": "2014-03-20T20:18:51Z"
        },
        {
          "tag": "v0.9.5",
          "kind": "patch",
          "published_at": "2014-03-12T22:50:02Z"
        },
        {
          "tag": "v0.9.4",
          "kind": "patch",
          "published_at": "2014-01-10T23:13:54Z"
        },
        {
          "tag": "v0.9.3",
          "kind": "patch",
          "published_at": "2013-12-14T21:29:06Z"
        },
        {
          "tag": "v0.9.2",
          "kind": "patch",
          "published_at": "2013-11-06T20:05:58Z"
        },
        {
          "tag": "v0.9.1",
          "kind": "patch",
          "published_at": "2013-10-29T19:05:54Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2013-09-30T03:39:13Z"
        },
        {
          "tag": "v0.8.10",
          "kind": "patch",
          "published_at": "2013-09-22T21:52:32Z"
        },
        {
          "tag": "v0.8.9",
          "kind": "patch",
          "published_at": "2013-09-15T20:46:28Z"
        },
        {
          "tag": "v0.8.8",
          "kind": "patch",
          "published_at": "2013-09-08T23:51:32Z"
        },
        {
          "tag": "v0.8.7",
          "kind": "patch",
          "published_at": "2013-09-02T19:58:33Z"
        },
        {
          "tag": "v0.8.6",
          "kind": "patch",
          "published_at": "2013-08-06T23:21:39Z"
        },
        {
          "tag": "v0.8.5",
          "kind": "patch",
          "published_at": "2013-07-18T19:53:33Z"
        },
        {
          "tag": "v0.8.4",
          "kind": "patch",
          "published_at": "2013-07-11T06:09:09Z"
        },
        {
          "tag": "v0.8.3",
          "kind": "patch",
          "published_at": "2013-06-20T23:02:01Z"
        },
        {
          "tag": "v0.8.2",
          "kind": "patch",
          "published_at": "2013-05-23T19:21:18Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2013-04-26T19:27:52Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2013-04-23T19:29:14Z"
        },
        {
          "tag": "v0.7.21",
          "kind": "patch",
          "published_at": "2013-04-16T23:17:17Z"
        },
        {
          "tag": "v0.7.20",
          "kind": "patch",
          "published_at": "2013-04-09T23:59:46Z"
        },
        {
          "tag": "v0.7.19",
          "kind": "patch",
          "published_at": "2013-03-27T19:41:19Z"
        },
        {
          "tag": "v0.7.18",
          "kind": "patch",
          "published_at": "2013-03-25T05:15:48Z"
        },
        {
          "tag": "v0.7.17",
          "kind": "patch",
          "published_at": "2013-03-11T19:23:08Z"
        },
        {
          "tag": "v0.7.16",
          "kind": "patch",
          "published_at": "2013-02-23T06:43:34Z"
        },
        {
          "tag": "v0.7.15",
          "kind": "patch",
          "published_at": "2013-02-13T05:59:26Z"
        },
        {
          "tag": "v0.7.14",
          "kind": "patch",
          "published_at": "2013-01-29T00:37:30Z"
        },
        {
          "tag": "v0.7.13",
          "kind": "patch",
          "published_at": "2013-01-04T00:55:34Z"
        },
        {
          "tag": "v0.7.12",
          "kind": "patch",
          "published_at": "2012-12-30T05:29:42Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "6dbc4e1bd799c254f258687566fd899c322388c7",
          "body": null,
          "is_bot": false,
          "headline": "tests: use the specified perl to execute cpanm. (#2157)",
          "author_name": "Johnny Wang",
          "author_login": "xiaocang",
          "committed_at": "2023-02-22T07:20:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e05fa3adb0d2492ecaaf2cb76498e23765aa6ab",
          "body": "tests: cross requests cosocket can only be use one time.\r\ncross request cosocket can not be reuese after connect().",
          "is_bot": false,
          "headline": "tests: cross requests cosocket can only be use one time.",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2023-02-06T07:15:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6ee03abaaf1dd08e12a0292f60618d15623e0c7",
          "body": "…reated by ngx_http_lua_create_fake_request.",
          "is_bot": false,
          "headline": "bugfix: cleanup of http request will not be callled for the request c…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2023-02-06T03:14:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "992bfc352a25cd7da25f86dc203f0dd6a3cd7926",
          "body": "Co-authored-by: timzrhuang <timzrhuang@tencent.com>",
          "is_bot": false,
          "headline": "style: use forward declaration.",
          "author_name": "ZongRun",
          "author_login": "rodman10",
          "committed_at": "2023-01-27T06:03:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a485992435771f354c09330c2706d53c8d9cbf4",
          "body": null,
          "is_bot": false,
          "headline": "bumped the lua version to 0.10.23.",
          "author_name": "jiahao",
          "author_login": "xiaocang",
          "committed_at": "2023-01-19T04:40:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47f0a367626eefe912482fd931637d2e3b0d0374",
          "body": "… called.",
          "is_bot": false,
          "headline": "bugfix: cosocket did not exit when worker_shutdown_timeout handler is…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2023-01-13T09:49:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81bc96401edadc4a306152eb0ecfd3e68c4ce429",
          "body": "…andshake.t t/186-cosocket-busy-bufs.t.",
          "is_bot": false,
          "headline": "tests: fixed some test cases in t/129-ssl-socket.t t/162-socket-tls-h…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2023-01-13T09:25:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f488965b89238e0bba11c13fdb9b11b4a0f20d67",
          "body": null,
          "is_bot": false,
          "headline": "feature: added HTTP 3.0 support to ngx.req.http_version().",
          "author_name": "Yu.Zhu",
          "author_login": "nandsky",
          "committed_at": "2022-12-28T12:12:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f4005fa879fc2ed329275c47e238bff1f8b890e",
          "body": "Co-authored-by: timzrhuang <timzrhuang@tencent.com>",
          "is_bot": false,
          "headline": "bugfix: fix receiveuntil rest bytes count.",
          "author_name": "ZongRun",
          "author_login": "rodman10",
          "committed_at": "2022-12-19T11:15:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4045ea8eb72c792de8465dfa6c9bbc638ff96bb8",
          "body": "For example:\r\nTEST_NGINX_RANDOMIZE=1 prove -j8 -r -I. t/",
          "is_bot": false,
          "headline": "tests: test failed when running in randmonize mode.",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-12-09T12:29:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e3b1c4fde47039f0ce2ee75fc678dab27944667",
          "body": "Fix #2099",
          "is_bot": false,
          "headline": "bugfix: define busy_bufs per cosocket (#2119)",
          "author_name": "jinhua luo",
          "author_login": "kingluo",
          "committed_at": "2022-11-06T01:39:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56347d174dc3ca296fc436477a250f28f8bda84f",
          "body": null,
          "is_bot": false,
          "headline": "tests: upgrade openssl to 1.1.1s. (#2117)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-11-03T01:15:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0499e844305807b1126f5aaf1080bdf3ca9bbd87",
          "body": "Closes Issue #2111",
          "is_bot": false,
          "headline": "doc: add link to pre-defined Nginx variables (#2116)",
          "author_name": "Marcelo Parada",
          "author_login": "mparada",
          "committed_at": "2022-11-02T15:14:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a31e9cf3377f2bfe0ddd18ccbf0b62b0baa47f30",
          "body": "… (#2115)\n\nFix #2110\r\n\r\nCo-authored-by: lijunlong <lijunlong@openresty.com>",
          "is_bot": false,
          "headline": "bugfix: avoid buf double free in ngx.print if lua body filter enabled…",
          "author_name": "jinhua luo",
          "author_login": "kingluo",
          "committed_at": "2022-11-01T15:07:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb977111bbf47779410e7e2ad267b95faa374fc1",
          "body": null,
          "is_bot": false,
          "headline": "bugfix: add a timed recycling child process as a last resort. (#2112)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-10-27T12:23:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b754786bb507ab76f8bfae2fc88aa59a959908a1",
          "body": null,
          "is_bot": false,
          "headline": "feature: add new ffi api ngx_http_lua_ffi_msec. (#2108)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-10-27T03:59:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3207da152a1cead67ade7b3d4234681f2c44ba77",
          "body": "Signed-off-by: spacewander <spacewanderlzx@gmail.com>",
          "is_bot": false,
          "headline": "chore: add assertion to make linter happy (#2107)",
          "author_name": "罗泽轩",
          "author_login": "spacewander",
          "committed_at": "2022-10-20T15:43:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a318d250f547c854ea2b091d0e06372ac0c00fd5",
          "body": null,
          "is_bot": false,
          "headline": "doc: add detail on explanation of a running timer (#2105)",
          "author_name": "Wangchong Zhou",
          "author_login": "fffonion",
          "committed_at": "2022-10-13T11:37:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4bbb57aa4a6995bd3efaf35c01e826de6f3cdf3a",
          "body": null,
          "is_bot": false,
          "headline": "doc: add release description for ngx.worker.pids(). (#2104)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-09-30T06:00:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d518adcac43006f121e83c1b67c7f5177ab44757",
          "body": null,
          "is_bot": false,
          "headline": "Merge tag 0.10.22 into master.",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-09-15T03:53:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d9032298ef542aef058fa02940a6ecd9cf25423",
          "body": null,
          "is_bot": false,
          "headline": "bumped the lua version to 0.10.22.",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-09-15T02:59:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4add942393fbc487cd540a09f581a032f90be325",
          "body": null,
          "is_bot": false,
          "headline": "bugfix: did not wakeup coroutine when worker thread finished.",
          "author_name": "kingluo",
          "author_login": "kingluo",
          "committed_at": "2022-09-15T02:41:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cff86dd7f677e3b856fb7ca1de90746b24eb6411",
          "body": null,
          "is_bot": false,
          "headline": "doc: fix the version in README (#2089)",
          "author_name": "罗泽轩",
          "author_login": "spacewander",
          "committed_at": "2022-08-21T14:56:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "edfa0f984ec60bd0658b80643c2fd253f3c5ad0b",
          "body": null,
          "is_bot": false,
          "headline": "feat: add ngx_http_lua_ffi_worker_pids to get all workers pid map",
          "author_name": "attenuation",
          "author_login": "oowl",
          "committed_at": "2022-08-21T14:00:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e2a7f459353a26d9475a54661c70a6e2c8cd27e",
          "body": "Co-authored-by: lijunlong@openresty.com",
          "is_bot": false,
          "headline": "bugfix: run_worker_thread arg is self-reference.",
          "author_name": "fesily",
          "author_login": "fesily",
          "committed_at": "2022-08-14T03:55:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb6d6cbf00bc4891ad2d8af0d42ec722ce8bec30",
          "body": null,
          "is_bot": false,
          "headline": "tests: build with DDEBUG=1. (#2084)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-08-12T04:52:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5eb7101d3307f82226b83209806cf90a483fd236",
          "body": null,
          "is_bot": false,
          "headline": "doc: complete md5.lua example in run_worker_thread api (#2085)",
          "author_name": "Jun Ouyang",
          "author_login": "oowl",
          "committed_at": "2022-08-12T01:23:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7e67a596f707c916b009b17b3d22b925e6f2e11",
          "body": null,
          "is_bot": false,
          "headline": "doc: add more explanation for premature in ngx.timer.at.",
          "author_name": "levy001",
          "author_login": "levy001",
          "committed_at": "2022-08-07T01:01:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73f2b3f6fe13b4852ad4ae02a62d33f41879eaf9",
          "body": null,
          "is_bot": false,
          "headline": "bugfix: typo in the debug message. (#2081)",
          "author_name": "聪",
          "author_login": "woodgear",
          "committed_at": "2022-08-04T15:54:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b7bde2e7986d2150606e33e303c6bd1c40271a6",
          "body": "Co-authored-by: doujiang24 <doujiang24@gmail.com>\nCo-authored-by: lijunlong <zhuizhuhaomeng@gmail.com>",
          "is_bot": false,
          "headline": "feature: added new API bind.",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-07-13T01:33:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "44486a45f4de09122811a07c697a69513a60b24e",
          "body": null,
          "is_bot": false,
          "headline": "feature: add shdict APIs into worker thread (#2074)",
          "author_name": "jinhua luo",
          "author_login": "kingluo",
          "committed_at": "2022-07-12T02:59:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99b29cd169c01274c127f812482b956abcad2d6e",
          "body": "… 'arg' argument. (#2073)",
          "is_bot": false,
          "headline": "doc: clarify the ngx.req.set_uri_args api when using Lua table as the…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-07-10T12:26:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fd1e83c80612998647ee7ea933d3fdb2e9d9d9b",
          "body": null,
          "is_bot": false,
          "headline": "bugfix: doesn't set flags for Darwin arm64. (#2071)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-07-03T12:24:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c43f1c4f2018a0f999fbf45afc8daf0352b104a",
          "body": null,
          "is_bot": false,
          "headline": "ci: bumped OpenSSL to 1.1.1p. (#2070)",
          "author_name": "Johnny Wang",
          "author_login": "xiaocang",
          "committed_at": "2022-07-01T05:11:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74b8d4b4f969508a47cd0ef9e510eec367f1e9c1",
          "body": "Signed-off-by: spacewander <spacewanderlzx@gmail.com>",
          "is_bot": false,
          "headline": "chore: update the PR types (#2069)",
          "author_name": "罗泽轩",
          "author_login": "spacewander",
          "committed_at": "2022-07-01T05:10:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c55fceb5cf9dbafa179b6925a13bb6f47787b0ed",
          "body": "Signed-off-by: spacewander <spacewanderlzx@gmail.com>",
          "is_bot": false,
          "headline": "ci: add a way to check PR title automatically (#2067)",
          "author_name": "罗泽轩",
          "author_login": "spacewander",
          "committed_at": "2022-07-01T02:02:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6d167cf1a93c0c885c28db5a439f2404874cb26",
          "body": "…#2063)",
          "is_bot": false,
          "headline": "bugfix: update handling of multiple headers changed in nginx 1.23.0 (…",
          "author_name": "Hiroaki Nakamura",
          "author_login": "hnakamur",
          "committed_at": "2022-06-28T05:37:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c8597eda0c3181f15ff58dedf3fb41f4259146fb",
          "body": "…roup. (#2064)\n\nbug: https://groups.google.com/g/openresty/c/qkS_9whMvXc",
          "is_bot": false,
          "headline": "tests: change the running phase to cover the bug reported in google g…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-06-23T11:55:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a0a8968cded113ecd31913c4e0aefc195578ac0",
          "body": null,
          "is_bot": false,
          "headline": "bugfix: did not wakeup coroutine when worker thread finished.",
          "author_name": "kingluo",
          "author_login": "kingluo",
          "committed_at": "2022-06-18T14:54:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3fe8d9ddeb144b121e26cc2251b925e4f673f554",
          "body": null,
          "is_bot": false,
          "headline": "change: can not receive udp datagram greater 8192. (#2057)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-06-14T10:15:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c60e8966da3d72d591d2cb12980b18c5b0de3cd",
          "body": "* optimize: destroy pipe proc when freeing the request.\r\n\r\nThe connections are cached until gc collect.\r\n\r\ncheck the number of the free via the following cmd:\r\ngdb --batch -q  -p 3049 -ex \"print ngx_cycle->free_connection_n\" 2>/dev/null;\r\n\r\nThe nginx config to reproduce the problem\r\n\r\n    \tlocation \n[…]\n           proc:set_timeouts(nil, nil, nil, 2000)\r\n                local data, err, partial = proc:stdout_read_line()\r\n                proc:wait()\r\n                ngx.say(data)\r\n            }\r\n    \t}",
          "is_bot": false,
          "headline": "optimize: destroy pipe proc when freeing the request. (#2052)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-05-30T03:28:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e7660d75a3877faffcecef373ef66de214e6ad65",
          "body": null,
          "is_bot": false,
          "headline": "doc: revised English grammar in ngx_http_lua_timer.c. (#2053)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-05-26T01:03:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c6478b08f7f1721c589299da01314097992b727",
          "body": null,
          "is_bot": false,
          "headline": "Merge branch '0.10.21.x'",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-05-26T00:09:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ac2ab27976d0834a7baf6c418ee4bed4dcac9e6",
          "body": "    } else if (tctx.pool) {\r\n   \t\r\nCID 251579 (#1 of 1): Use after free (USE_AFTER_FREE)\r\n18. deref_arg: Calling ngx_destroy_pool dereferences freed pointer tctx.pool.\r\n762        ngx_destroy_pool(tctx.pool);\r\n763    }\r\n764}",
          "is_bot": false,
          "headline": "bugfix: tctx.pool is double freed. (#2049)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-05-25T13:09:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b6db2e741dc77fa7c5f6da12ef7d7f9c26a930a5",
          "body": null,
          "is_bot": false,
          "headline": "optimize: add error log when closing the pipe failed. (#2050)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-05-25T13:04:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b91221bd6c234a20aab18e41905dcc7d64dea07e",
          "body": "…2051)\n\nderef_ptr: Directly dereferencing pointer ctx.\r\n1143    *ctx = ngx_http_get_module_ctx(r, ngx_http_lua_module);\r\n    CID 258020 (#1 of 1): Dereference before null check (REVERSE_INULL)check_after_deref: Null-checking ctx suggests that it may be null, but it has already been dereferenced on all paths leading to the check.\r\n1144    if (ctx == NULL) {\r\n1145        return NGX_HTTP_LUA_FFI_NO_REQ_CTX;\r\n1146    }",
          "is_bot": false,
          "headline": "optimize: fix potential null pointer dereference found by coverity (#…",
          "author_name": "Ilya Shipitsin",
          "author_login": "chipitsine",
          "committed_at": "2022-05-25T13:03:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "381e9b3a61a119df688a9b2452a18d710c385de9",
          "body": null,
          "is_bot": false,
          "headline": "bugfix: wrong memory size for the pernding timers array. (#2048)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-05-20T06:13:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af130ae896aae23877a9ba76c8f57e269a3c4468",
          "body": "*** CID 352755:  Control flow issues  (DEADCODE)\n/src/ngx_http_lua_socket_tcp.c: 1541 in ngx_http_lua_socket_tcp_check_busy()\n1535     #if (NGX_HTTP_SSL)\n1536\n1537     static const char *\n1538     ngx_http_lua_socket_tcp_check_busy(ngx_http_request_t *r,\n1539         ngx_http_lua_socket_tcp_upstream\n[…]\n&& u->conn_waiting) {\n1542             return \"socket busy connecting\";\n1543         }\n1544\n1545         if ((ops & SOCKET_OP_READ) && u->read_waiting) {\n1546             return \"socket busy reading\";",
          "is_bot": false,
          "headline": "fix dead code found by coverity",
          "author_name": "Ilya Shipitsin",
          "author_login": "chipitsine",
          "committed_at": "2022-05-16T04:43:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a8e710cb9e388b8bfd16d9eee57504e90e3acef",
          "body": "* fix potential null pointer dereference found by Coverity\r\n\r\n*** CID 352757:  Null pointer dereferences  (FORWARD_NULL)\r\n/src/ngx_http_lua_socket_tcp.c: 1733 in\r\nngx_http_lua_ffi_socket_tcp_sslhandshake()\r\n1727     #else\r\n1728             *errmsg = \"no OCSP support\";\r\n1729             return NGX_ER\n[…]\n u->ssl_name.len = 0;\r\n1735\r\n1736         } else {\r\n1737             if (u->ssl_name.data) {\r\n1738                 /* buffer already allocated */\r\n\r\nCo-authored-by: lijunlong <lijunlong@openresty.com>",
          "is_bot": false,
          "headline": "fix potential null pointer dereference found by Coverity (#2043)",
          "author_name": "Ilya Shipitsin",
          "author_login": "chipitsine",
          "committed_at": "2022-05-12T23:56:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "86e1a6446a3b33c41536734df2601a5c469330cf",
          "body": "…ted #1992 (#1995)",
          "is_bot": false,
          "headline": " feature: content_by_lua_file return 503 if read err and file is exis…",
          "author_name": "jizhuozhi",
          "author_login": "jizhuozhi",
          "committed_at": "2022-05-08T12:59:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "653d6a36f46b077cb902d7ba40824c299cf9bbf4",
          "body": "There is a known issue in LuaJIT (https://github.com/LuaJIT/LuaJIT/issues/205#issuecomment-236426398) that passing non 64-bit value after the 8th argument in FFI calls doesn't work on Apple ARM64 devices, there is no plan on addressing this issue anytime soon from LuaJIT side.\r\n\r\nThis commit conditionally compiles proxy FFI functions that takes in pointer to struct in order to reduce the length of the argument list, getting around this issue.",
          "is_bot": false,
          "headline": "bugfix: Apple Silicon FFI ABI limitation workaround",
          "author_name": "Chrono",
          "author_login": "chronolaw",
          "committed_at": "2022-04-06T12:48:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc2ecdae2cb88beba2d4fe190ec3560a4d3dec74",
          "body": null,
          "is_bot": false,
          "headline": "ci: add util/build-without-ssl.sh. (#2035)",
          "author_name": "xiaobiaozhao",
          "author_login": "xiaobiaozhao",
          "committed_at": "2022-04-02T00:47:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f0c04dbf61b17d4742f90f1aeab94cbe4170c830",
          "body": null,
          "is_bot": false,
          "headline": "bugfix: failed to compile when nginx https is disabled. (#2034)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-04-01T15:04:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c0cc5c45635a6fbaf9b6ebeda5232f4004f5cbc",
          "body": "…2029)",
          "is_bot": false,
          "headline": "doc: did not generate README.markdown from doc/HttpLuaModule.wiki. (#…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-03-21T12:35:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1d378824ce55ffab62fbf4d42ee3a7e49a79013",
          "body": "Co-authored-by: lijunlong <lijunlong@openresty.com>",
          "is_bot": false,
          "headline": "feature: add `server_rewrite_by_lua*`. (#2004)",
          "author_name": "xiaobiaozhao",
          "author_login": "xiaobiaozhao",
          "committed_at": "2022-03-21T07:45:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3d1431790f714fd5e6c8425b46224c2f0b7724a5",
          "body": null,
          "is_bot": false,
          "headline": "travis: update openssl to 1.1.1n. (#2028)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-03-18T00:11:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8df296c47992d33681cf639d2d251248d834dd2b",
          "body": null,
          "is_bot": false,
          "headline": "travis: fixe the uri of lua-resty-core.",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-03-15T15:40:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b902657f370e392bd5066d2eafed7a3429af19e",
          "body": "…k:sslhandshake` with FFI\n\nThis adds support for setting client certificate/private key that will be used later\nfor mutual TLS handshake with a server. Also, the `tcpsock:sslhandshake`\nimplementation has been rewritten to use FFI C API to be more performant\nand easier to maintain.\n\nCo-authored-by: Chrono Law <chrono.law@konghq.com>",
          "is_bot": false,
          "headline": "cosocket: add function `tcpsock:setclientcert`, reimplemented `tcpsoc…",
          "author_name": "Datong Sun",
          "author_login": "dndx",
          "committed_at": "2022-03-15T14:13:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fea11712274a26b9b3b5b3b44fb0791a312091d",
          "body": "…t conflict. (#2025)",
          "is_bot": false,
          "headline": "tests: use random port numbers instead of fixed port number to preven…",
          "author_name": "Johnny Wang",
          "author_login": "xiaocang",
          "committed_at": "2022-03-10T10:04:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7444abe8e50b49d91a922c958f904ba893e54e7",
          "body": "…riting the original pid file. (#2024)",
          "is_bot": false,
          "headline": "tests: 160-disable-init-by-lua.t: prevent the test process from overw…",
          "author_name": "Johnny Wang",
          "author_login": "xiaocang",
          "committed_at": "2022-03-09T08:17:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "247086ed3892647ab5ecc4fd9946186bb76f15db",
          "body": "Signed-off-by: spacewander <spacewanderlzx@gmail.com>",
          "is_bot": false,
          "headline": "doc: describe the second argument of get_uri_args (#2023)",
          "author_name": "罗泽轩",
          "author_login": "spacewander",
          "committed_at": "2022-03-08T00:40:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d959374e027475c27a96c3dde38486b4506edda4",
          "body": "…ess for ngx.header.HEADER.",
          "is_bot": false,
          "headline": "optimize: use ngx_hash_t to optimize the built-in header look-up proc…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-03-05T09:03:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "974d5d163d86af6852c39143ac6076d0144f79de",
          "body": null,
          "is_bot": false,
          "headline": "feature: add FFI implementation for ngx.arg getter (#2021)",
          "author_name": "罗泽轩",
          "author_login": "spacewander",
          "committed_at": "2022-03-04T09:18:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd92edf3b82438455036af1408d2377954f28b8f",
          "body": null,
          "is_bot": false,
          "headline": "doc: modify openssl patch requirements. (#2022)",
          "author_name": "Blaise Wang",
          "author_login": "blaisewang",
          "committed_at": "2022-03-04T01:04:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "496d9853347e8eefa81a442e42d33b4b92f5c825",
          "body": "… (#2019)",
          "is_bot": false,
          "headline": "tests: change the count of the record after adding ngx.get_raw_phase.…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-03-02T09:23:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97d1b704d0d86b5370d57604a9e2e3f86e4a33ec",
          "body": "…close pipe after dup2.\n\nAfter the fork, the pipe will be copied by dup2, so there are two fd for the same open file description.\n\neg: 0, 11 for the same pipe file, 1, 13 for another pipe file.\n\nWhen running a short life process, the fd will be closed automatically when the process exits.\nWhen runni\n[…]\n fd 13 opened forever.\n\nwhen ngx.pipe reads from the pipe, it will wait for reading until the pipe is closed or timeout.\nBecause the daemon won't close the pipe, so ngx.pipe will wait for the timeout.",
          "is_bot": false,
          "headline": "bugfix: ngx.pipe waits until timeout because child process forgot to …",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-03-02T06:54:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d001dea7783c7128bbc9dc0f96f2a24badd9ec2c",
          "body": "… (#1982)",
          "is_bot": false,
          "headline": "bugfix: posted event handler was called after event memory was freed.…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-03-02T06:54:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d585bd535bae9841ccb5a6856355b4b78bdc9f5",
          "body": "…y* phase. (#2017)",
          "is_bot": false,
          "headline": "bugfix: fixed size of the array when initialized in the init_worker_b…",
          "author_name": "Johnny Wang",
          "author_login": "xiaocang",
          "committed_at": "2022-02-27T12:58:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66294b9d0675c2393e7d4ee625d7bd2aefc6b9c0",
          "body": "…nnection is closed. (#2016)",
          "is_bot": false,
          "headline": "bugfix: ambiguous error message 'connection in dubious state' when co…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-02-24T01:47:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77540f78c33f27d5b3b93a485d43bb423bc83372",
          "body": null,
          "is_bot": false,
          "headline": "doc: change description for ssl_client_hello_by_lua.",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-02-18T06:19:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cee06592f8bcdb7977b1f77d5cac4e4c24e8b36d",
          "body": null,
          "is_bot": false,
          "headline": "doc: fixed link to lua-resty-core",
          "author_name": "Noah Jahn",
          "author_login": "noahjahn",
          "committed_at": "2022-02-18T06:13:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15b693b3381f6115fa8a7870e6cd313c608b6cdb",
          "body": "The total length of the chunkname is 60. The format is \"=tag(file:line)\".\r\nSo the space left for the tag, file and line is only 56 chars.",
          "is_bot": false,
          "headline": "bugfix: passing the wrong chunkname argument to luaL_loadbuffer. (#2010)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-02-14T09:48:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70a50e66c4e43287d0bbd4ec9bd0485f53a7e110",
          "body": "… (init/header_filter/body_filter)_by_lua_block and so on. (#2008)",
          "is_bot": false,
          "headline": "optimize: change lua chunkname to config filename and line number for…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-02-14T07:12:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "907d1d9adac214abe93f8c7d5dea38909a868f0f",
          "body": null,
          "is_bot": false,
          "headline": "doc: modified the todo section. we now have exit_worker_by_lua (#2009)",
          "author_name": "Chrono",
          "author_login": "chronolaw",
          "committed_at": "2022-02-11T11:52:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "297e73cde6f08aa7f6bd530b9f0a301570ddf15d",
          "body": "…ast line of the code block when load lua code block failed. (#2005)",
          "is_bot": false,
          "headline": "bugfix: the error message should use the first line rather than the l…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-02-09T04:43:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2615bafa34f649923c6d80bc4b4393a2e62b87f3",
          "body": "…formed requests.\n\nCo-authored-by: lijunlong@openresty.com",
          "is_bot": false,
          "headline": "bugfix: segment fault when get header via ngx.req.raw_header with mal…",
          "author_name": "Gordon McKinney",
          "author_login": "GordonMcKinney",
          "committed_at": "2022-02-08T15:29:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8cf9c632d8ac453a74ce7aabf4e88d66f2fea6a6",
          "body": null,
          "is_bot": false,
          "headline": "travis-ci: upgraded openssl to 1.1.1m, pcre to 8.45. (#2002)",
          "author_name": "Johnny Wang",
          "author_login": "xiaocang",
          "committed_at": "2022-01-26T15:42:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b497f5a56df559c92df5b2de165a37697ac9d53",
          "body": null,
          "is_bot": false,
          "headline": "change: delete useless code for get old_cpath. (#2000)",
          "author_name": "Tinglong Yang",
          "author_login": "ytlm",
          "committed_at": "2022-01-25T14:36:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce8405c73b8d19becb79cf73e8159aaa36356e07",
          "body": null,
          "is_bot": false,
          "headline": "bugfix: ngx.run_worker_thread injected api into the wrong table.(#1996)",
          "author_name": "jinhua luo",
          "author_login": "kingluo",
          "committed_at": "2022-01-19T01:29:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa5982c63986981a3d44bcf0dbfd5e728da7cdc6",
          "body": null,
          "is_bot": false,
          "headline": "tests: t/140-ssl-c-api.t failed because got wrong libssl.so.",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-01-17T03:51:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a41fdcea494930166a0b72e2fcc9290769854bce",
          "body": "…uest.",
          "is_bot": false,
          "headline": "feature: add api to fetch raw nginx ssl pointer of the downstream req…",
          "author_name": "James Callahan",
          "author_login": "james-callahan",
          "committed_at": "2022-01-17T00:49:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f02311a9f3680d8fd0ad2aa44af83dab8dce407",
          "body": "Co-authored-by: guanglinlv <lvguanglin@huawei.com>",
          "is_bot": false,
          "headline": "feature: ssl/tls: support for passphrase protected key. (#1991)",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-01-16T13:21:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7eb8ad02510fea37dc89731bf1a397c07ea4c326",
          "body": "…close pipe after dup2.\n\nAfter the fork, the pipe will be copied by dup2, so there are two fd for the same open file description.\n\neg: 0, 11 for the same pipe file, 1, 13 for another pipe file.\n\nWhen running a short life process, the fd will be closed automatically when the process exits.\nWhen runni\n[…]\n fd 13 opened forever.\n\nwhen ngx.pipe reads from the pipe, it will wait for reading until the pipe is closed or timeout.\nBecause the daemon won't close the pipe, so ngx.pipe will wait for the timeout.",
          "is_bot": false,
          "headline": "bugfix: ngx.pipe waits until timeout because child process forgot to …",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-01-11T01:54:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "30debf6740433729af881ca8553cf4ee0438abef",
          "body": null,
          "is_bot": false,
          "headline": "doc: mentioned OpenResty.",
          "author_name": "Yichun Zhang (agentzh)",
          "author_login": "agentzh",
          "committed_at": "2022-01-09T03:46:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "320f030785e901e4310cb75607541240a771f5af",
          "body": null,
          "is_bot": false,
          "headline": "doc:move all the discouraged *_by_lua documentation to *_by_lua_block",
          "author_name": "qyihua",
          "author_login": "qyihua",
          "committed_at": "2022-01-04T06:54:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1637b35349be22e388b2673efad364b0c132d549",
          "body": null,
          "is_bot": false,
          "headline": "tests: travis.yml: ngx-releng depends on ack. (#1986)",
          "author_name": "Xiaobo Liu",
          "author_login": "cppcoffee",
          "committed_at": "2022-01-04T06:10:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f36fe2982b2dc748a842f2dda15a7490f91250b7",
          "body": "…st-Modified\"]. (#1983)\n\nCo-authored-by: Christian Becker <c.becker@mes-info.de>",
          "is_bot": false,
          "headline": "feature: expose the 'Last-Modified' response header as ngx.header[\"La…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-01-04T05:14:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75c68b225a52db71768ebf51838bc6b79d820970",
          "body": "… (#1982)",
          "is_bot": false,
          "headline": "bugfix: posted event handler was called after event memory was freed.…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2022-01-02T02:11:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de09fc6ccb80a49c66abfd025b0908f64d5bc16e",
          "body": null,
          "is_bot": false,
          "headline": "tests: removed duplicated c declaration in t/140-ssl-c-api.t.",
          "author_name": "detailyang",
          "author_login": "detailyang",
          "committed_at": "2021-12-26T14:23:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fce8ca380244e57657471346e956ea5ac7fa12e",
          "body": null,
          "is_bot": false,
          "headline": "optimize: don't calculate hash when clearing the request header.",
          "author_name": "spacewander",
          "author_login": "spacewander",
          "committed_at": "2021-12-26T14:08:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85388f4ef68cfffc3c9ed4af927fdef5baaaaf5a",
          "body": null,
          "is_bot": false,
          "headline": "feature: check the number of parameters for ngx.thread.wait",
          "author_name": "tan jinhua",
          "author_login": "rainingmaster",
          "committed_at": "2021-12-26T06:06:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0e56ca14693911196f237cd60735c05b9cf3c4d",
          "body": null,
          "is_bot": false,
          "headline": "optimize: don't calculate hash when clearing the header.",
          "author_name": "spacewander",
          "author_login": "spacewander",
          "committed_at": "2021-12-26T01:38:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a276476266efb2cd8fab35c2ecc6d703495a19bd",
          "body": "Co-authered-by: lijunlong<lijunlong@openresty.com>",
          "is_bot": false,
          "headline": "change: use nil instead of false when lpush&rpush overflow.",
          "author_name": "yang.yang",
          "author_login": "hy05190134",
          "committed_at": "2021-12-25T14:08:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b67b22af885fbe9e72609772d7071bd1bf04eb0d",
          "body": null,
          "is_bot": false,
          "headline": "feature: prevent calling ngx.exit() with invalid values.",
          "author_name": "Thibault Charbonnier",
          "author_login": "thibaultcha",
          "committed_at": "2021-12-25T10:53:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b6da3b6ce6ae9417b9d464d853ff1301cd0e9ed",
          "body": null,
          "is_bot": false,
          "headline": "feature: added ffi-based function 'ngx_http_lua_ffi_req_is_internal'.",
          "author_name": "chronolaw",
          "author_login": "chronolaw",
          "committed_at": "2021-12-25T09:41:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e98f5c508ff782b49cafa7a970b6e454a4faeb77",
          "body": "`ngx.req.set_header` acts similar `proxy_set_header` for `proxy_pass` scenarios.\n\nCo-authored-by: Zaar Hai",
          "is_bot": false,
          "headline": "doc: Clarify ngx.req.set_header usage for proxies.",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2021-12-25T03:22:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5483b9157cd8ca7d3d71d909922bd08437f34d08",
          "body": "Co-authored-by: lijunlong <lijunllong@openrestycom>",
          "is_bot": false,
          "headline": "feature: added http const HTTP_NOT_IMPLEMENTED, fixes #1466.",
          "author_name": "Landon Manning",
          "author_login": "karai17",
          "committed_at": "2021-12-25T02:30:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37ec9f75617544cfcb39201724374c66d9328094",
          "body": "… and lua-resty-lrucache.",
          "is_bot": false,
          "headline": "doc: Readme: completed the Installation part, with add lua-resty-core…",
          "author_name": "kfang",
          "author_login": null,
          "committed_at": "2021-12-22T10:34:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94fa662bc3211f2557cbdb391e0c6feffcdde2d3",
          "body": null,
          "is_bot": false,
          "headline": "style: removed extra space. (#1981)",
          "author_name": "Xiaobo Liu",
          "author_login": "cppcoffee",
          "committed_at": "2021-12-17T04:00:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6302d47409e55b59838a9f450f3d713aae7e9eb5",
          "body": "… free resolver ctx quickly.\n\nThis was introduce in commit acd53645754ce which is use to resovle double free of resolver ctx.\nThis issue happens only when nginx can not get any reply from the dns server until timeout.",
          "is_bot": false,
          "headline": "tests: NGINX_TEST_CHECK_LEAK detects memoryleak because nginx can not…",
          "author_name": "lijunlong",
          "author_login": "zhuizhuhaomeng",
          "committed_at": "2021-12-10T03:20:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 56,
      "commits_last_year": 0,
      "latest_release_at": "2018-04-22T18:41:56Z",
      "latest_release_tag": "v0.10.13",
      "releases_from_tags": true,
      "days_since_last_push": 1244,
      "active_weeks_last_year": 0,
      "days_since_latest_release": 3016,
      "mean_days_between_releases": 78.3
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 1,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "misc/recv-until-pm/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 185791,
      "source_files_sampled": 125,
      "oversized_source_files": 4,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [],
      "dependencies": [],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "agentzh",
          "commits": 2946,
          "avatar_url": "https://avatars.githubusercontent.com/u/56241?v=4"
        },
        {
          "type": "User",
          "login": "chaoslawful",
          "commits": 159,
          "avatar_url": "https://avatars.githubusercontent.com/u/56617?v=4"
        },
        {
          "type": "User",
          "login": "thibaultcha",
          "commits": 112,
          "avatar_url": "https://avatars.githubusercontent.com/u/1125431?v=4"
        },
        {
          "type": "User",
          "login": "zhuizhuhaomeng",
          "commits": 78,
          "avatar_url": "https://avatars.githubusercontent.com/u/4002750?v=4"
        },
        {
          "type": "User",
          "login": "spacewander",
          "commits": 71,
          "avatar_url": "https://avatars.githubusercontent.com/u/4161644?v=4"
        },
        {
          "type": "User",
          "login": "xiaocang",
          "commits": 34,
          "avatar_url": "https://avatars.githubusercontent.com/u/983723?v=4"
        },
        {
          "type": "User",
          "login": "doujiang24",
          "commits": 28,
          "avatar_url": "https://avatars.githubusercontent.com/u/570391?v=4"
        },
        {
          "type": "User",
          "login": "chipitsine",
          "commits": 20,
          "avatar_url": "https://avatars.githubusercontent.com/u/2217296?v=4"
        },
        {
          "type": "User",
          "login": "rainingmaster",
          "commits": 16,
          "avatar_url": "https://avatars.githubusercontent.com/u/8320024?v=4"
        },
        {
          "type": "User",
          "login": "jinglong",
          "commits": 15,
          "avatar_url": "https://avatars.githubusercontent.com/u/853403?v=4"
        }
      ],
      "contributors_sampled": 100,
      "top_contributor_share": 0.798
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": false,
      "ci_workflows": [
        "semantic-pull-request.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 26 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 0,
            "reason": "license file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "6dbc4e1bd799c254f258687566fd899c322388c7",
        "ran_at": "2026-07-26T17:12:41Z",
        "aggregate_score": 3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/chronolaw/lua-nginx-module",
    "host": "github.com",
    "name": "lua-nginx-module",
    "owner": "chronolaw"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "critical",
      "name": "Overall health",
      "note": "Abandonment Policy applies a 85% multiplier to weighted overall health.",
      "notes": [
        {
          "code": "abandonment_overall_adjustment",
          "params": {
            "cap": 0,
            "pct": 85
          }
        }
      ],
      "value": 21,
      "inputs": {
        "security": 30,
        "vitality": 17,
        "community": 1,
        "governance": 36,
        "engineering": 38,
        "abandonment_cap": null,
        "abandonment_state": "at_risk",
        "abandonment_multiplier": 85,
        "weighted_overall_before_abandonment": 25,
        "overall_after_abandonment_multiplier": 21
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "critical",
        "name": "Vitality",
        "value": 17,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "commits_last_year": 0,
              "human_commit_share": 1,
              "days_since_last_push": 1244,
              "active_weeks_last_year": 0
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 1244 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 1244
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "0/52 weeks with commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "0 commits in the last year",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 40,
            "inputs": {
              "releases_count": 56,
              "latest_release_tag": "v0.10.13",
              "releases_from_tags": true,
              "days_since_latest_release": 3016,
              "mean_days_between_releases": 78.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "56 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 56
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 3016 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 3016
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~78.3 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 78.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "cap": null,
              "state": "at_risk",
              "guards": [
                "no_open_demand"
              ],
              "signals": [
                "release_stall",
                "scorecard_unmaintained"
              ],
              "red_flag": true,
              "multiplier_pct": 85,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 0,
              "unanswered_open_issues": 0,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 1250,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 1250 days; 2 unmet obligation(s): releases stalled, Scorecard reports it unmaintained",
                "points": 85,
                "status": "partial",
                "details": [
                  {
                    "code": "abandonment_flagged",
                    "params": {
                      "days": 1250,
                      "count": 2,
                      "signals": "releases stalled, Scorecard reports it unmaintained"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 1,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "no license file detected",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "license_absent",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 36,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 37,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 100,
              "top_contributor_share": 0.798
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 80% of commits",
                "points": 4.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 80
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "100 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 26 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 71,
            "inputs": {
              "followers": 1062,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "chronolaw",
              "public_repos": 52,
              "account_age_days": 4897
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1,062 followers of chronolaw",
                "points": 21.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1062,
                      "login": "chronolaw"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "52 public repos, account ~13 yr old",
                "points": 24.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 52
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 13
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 38,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "at_risk",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 30,
            "inputs": {
              "has_ci": true,
              "has_tests": false,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "https://openresty.org/",
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://openresty.org/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 30,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 30,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 26 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 25
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "at_risk",
        "name": "AI Readiness",
        "value": 45,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.94,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "94 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 94,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "critical",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 29,
            "inputs": {
              "has_nix": false,
              "has_tests": false,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "misc/recv-until-pm/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "misc/recv-until-pm/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "misc/recv-until-pm/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "C (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "C"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "primary_language": "C",
              "largest_source_bytes": 185791,
              "source_files_sampled": 125,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "C (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "C"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/125 source files over 60KB",
                "points": 53.2,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 125,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Community profile unavailable",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T17:12:57.902178Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/chronolaw/lua-nginx-module.svg",
  "full_name": "chronolaw/lua-nginx-module",
  "license_state": "absent",
  "license_spdx": null
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics.