dteh / dhttp

Full resolved dependency set from the GitHub dependency graph: 4 direct and 3 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

This repository publishes no package the index resolves, so its own dependency graph was assessed — 7 packages, which also include development and test pins that never ship: 4 carry known advisories, of which 1 are direct.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 12481,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 106566,
        "Shell": 7212,
        "Python": 3187
      },
      "pushed_at": "2026-07-17T18:34:39Z",
      "created_at": "2024-11-19T15:47:47Z",
      "owner_type": "User",
      "updated_at": "2026-07-17T18:35:17Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "master",
      "license_spdx_raw": null,
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "daniel",
      "type": "User",
      "login": "dteh",
      "company": null,
      "location": null,
      "followers": 7,
      "avatar_url": "https://avatars.githubusercontent.com/u/5299236?v=4",
      "created_at": "2013-08-24T03:52:04Z",
      "is_verified": null,
      "public_repos": 27,
      "account_age_days": 4715
    },
    "license": {
      "state": "absent",
      "spdx_id": null,
      "raw_spdx": null,
      "file_present": false,
      "scorecard_found": false,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.26.1",
          "kind": "patch",
          "published_at": "2026-06-10T22:32:18Z"
        },
        {
          "tag": "v1.26.0",
          "kind": "minor",
          "published_at": "2026-05-23T16:45:00Z"
        },
        {
          "tag": "v1.25.0",
          "kind": "minor",
          "published_at": "2026-05-23T16:34:29Z"
        },
        {
          "tag": "v1.24.1",
          "kind": "patch",
          "published_at": "2026-05-23T16:10:24Z"
        },
        {
          "tag": "v1.24.0",
          "kind": "minor",
          "published_at": "2026-05-23T16:10:07Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "17eca5149553e0319aceb5e2fe16b89e899c2d67",
          "body": "…indow)\n\nAdd Transport.HTTP2Settings (*HTTP2Settings) so callers can control the HTTP/2\n\"Akamai\" fingerprint the client emits on a new connection: the ordered SETTINGS\nlist and the initial connection-level WINDOW_UPDATE. Previously only the TLS\nClientHello (ClientHelloSettings) and header order were\n[…]\nAL_WINDOW_SIZE. When nil, Go's defaults are\nsent (unchanged behavior). Chrome, for example:\n\n\tHTTP2Settings{Settings: {{1,65536},{2,0},{4,6291456},{6,262144}},\n\t              ConnectionFlow: 15663105}",
          "is_bot": false,
          "headline": "feat(transport): configurable HTTP/2 client fingerprint (SETTINGS + w…",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2026-07-17T18:34:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5394ae46d8fa932fb4950d82e1fca4f619bd1cd6",
          "body": "A purely-additive subpackage for race-condition testing during authorized\nsecurity work, modelled on PortSwigger's \"engine + gate\" pattern:\nhttps://portswigger.net/web-security/race-conditions\n\nAPI (gate-style, single-use):\n\n  // h2 single-packet (preferred — sub-100µs server-side skew)\n  eng, _ := \n[…]\nengine actually lands the burst inside\nthe server's TOCTOU window.\n\nFor authorized security testing only — README spells this out.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add racing subpackage: HTTP/2 single-packet + HTTP/1.1 last-byte sync",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2026-06-10T22:31:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d8ac851cb4af746b8042d3d1f6f02ae24402dc1c",
          "body": "Three things rolled together because they all touch the documentation\nand developer-facing layout in coordinated ways.\n\nCLAUDE.md rewritten from the stale filter-repo era into a comprehensive\nagent guide for the current patch-series workflow. Covers the dual\nlayout (generated source vs. patches + sc\n[…]\nw clean.\n\nNo functional code changes; this is documentation + a build-layout\nrename. Tests (canaries + full baseline) still green.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Refresh docs, add agent guide, rename overlay/ -> _overlay/",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2026-05-23T21:07:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c519fa1d4245f46b60260560870b338c77f33127",
          "body": "Bump UPSTREAM_TAG go1.25.10 → go1.26.3; go.mod directive → go 1.26.0;\nutls stays at v1.8.2.\n\nNotable changes for this upgrade:\n\n* New file clientconn.go and clientconn_test.go (HTTP/2 ClientConn\n  exposed publicly via Transport.NewClientConn). Both vendor as plain\n  generated source.\n* New internal/\n[…]\nire-preserved;\nPeetprint stable at 1d4ffe9b... (no utls bump); full baseline 33\nfailures, identical to 1.25.10, zero new failures.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Upgrade to go1.26.3",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2026-05-23T16:44:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cfee54310c9094e02829f75877ff0ead2d932866",
          "body": "Bump UPSTREAM_TAG go1.24.13 → go1.25.10; go.mod directive → go 1.25.0;\nutls stays at v1.8.2 (forward-compatible).\n\nThe big structural change in this release:\n\n* Go 1.25 promoted synctest from internal to a public testing/synctest\n  package and refactored a chunk of h2_bundle.go's encodeHeaders /\n  v\n[…]\nsource. The dhttp-specific\nhunks in httpcommon are a clearly-marked block; the new test code in\ncsrf_test.go is upstream verbatim.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Upgrade to go1.25.10",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2026-05-23T16:33:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6094c3072f30002e122c7eab276facaba5aa2081",
          "body": "dhttp's transport.go (h1) and h2_bundle.go (h2) were unconditionally\ndeleting Content-Length and Content-Encoding from every response when\nrc.addedGzip was set, which is now the default for any non-HEAD/non-Range\nrequest since dhttp requests \"gzip, deflate, br, zstd\" by default.\n\nVanilla net/http ga\n[…]\nrides),\nwhich is the same godebug-in-fork limitation as the cookie tests.\nReclassified in .test_skip.txt under the godebug bucket.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix Content-Length stripped on every non-compressed response",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2026-05-23T16:00:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "679d0e42ef993cd66f5b074d87af89472eb3ecdb",
          "body": "Bump UPSTREAM_TAG to go1.24.13 (latest 1.24.x); go.mod directive to\ngo 1.24.0; utls from v1.6.7 to v1.8.2. The cloudflare/circl indirect\ndep drops, as utls v1.8.0+ removed it.\n\nPatch refresh (expected, h2_bundle and serve_test both touched upstream):\n- h2_bundle.go: upstream added :protocol pseudo-h\n[…]\n Chrome version (the latter includes Chrome 133 support). Expected\nbehavior, not a regression. .fingerprint-baseline.json updated.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Upgrade to go1.24.13 + utls v1.8.2",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2026-05-23T15:25:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c1248667fcc05c02b49876413617b23fb5e33c4d",
          "body": "Replace the filter-repo + git-merge workflow with a Debian-distro-style\npatch series. dhttp's divergence from vanilla net/http now lives in\npatches/0001-dhttp-combined.patch (3719 lines) applied to upstream Go at\nthe pin in UPSTREAM_TAG. scripts/build.sh regenerates the module tree;\nscripts/upgrade.\n[…]\nream/ (orphan gitlink) and the upstream-local git remote removed.\nREADME rewritten around the new workflow and version-pin scheme.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Migrate to patch-series workflow (Step 0-3 of Go 1.26 upgrade)",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2026-05-23T15:11:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "81807d0e7437a111dc3b26ca42d0e16d279ca417",
          "body": null,
          "is_bot": false,
          "headline": "allow for ordering content-length and accept-encoding headers in h2",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2025-06-17T10:15:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36b8d30dbd740c872c185ec10c423e5e9c71e519",
          "body": null,
          "is_bot": false,
          "headline": "fix: always overwrite headers relating to transferWriter",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2025-06-05T14:27:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71fd5bb5adc981b433df1450dafaeab5e71b1f17",
          "body": "…eaders orderable",
          "is_bot": false,
          "headline": "fix: make user-agent, content-length, transfer-encoding and trailer h…",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2025-06-04T14:49:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ff292b43b2027220638eb671758b9fa3936f8304",
          "body": "bump to go1.24rc2",
          "is_bot": false,
          "headline": "Merge pull request #5 from dteh/merge/go1.24rc2",
          "author_name": "daniel",
          "author_login": "dteh",
          "committed_at": "2025-01-30T14:02:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75149b7e0c970b71eb7584ff012cc22e87b92c7b",
          "body": null,
          "is_bot": false,
          "headline": "lgtm",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2025-01-30T14:00:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bffb68a45fce0714813d1a3440a55f7651f66256",
          "body": null,
          "is_bot": false,
          "headline": "Merge tag 'go1.24rc2' into merge/go1.24rc2",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2025-01-28T17:52:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ac3ac1145c1ff47f8bcf892fe12940f33187b8b",
          "body": "…eated redirects\n\nWhen an HTTP redirect changes the host of a request, we drop\nsensitive headers such as Authorization from the redirected request.\nFix a bug where a chain of redirects could result in sensitive\nheaders being sent to the wrong host:\n\n  1. request to a.tld with Authorization header\n  \n[…]\n/go/+/643100\nAuto-Submit: Michael Knyszek <mknyszek@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Michael Pratt <mpratt@google.com>",
          "is_bot": false,
          "headline": "[release-branch.go1.24] net/http: persist header stripping across rep…",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2025-01-16T19:36:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "12e20c17458e5174a9078d826e4af6091ab74a38",
          "body": "Fixes #70874\n\nChange-Id: Icbcfc95e6b45521880287dcc3bc8609461a3b401\nGitHub-Last-Rev: 05276c56b019d8774e8eee881101509cf83c0f3d\nGitHub-Pull-Request: golang/go#70877\nReviewed-on: https://go-review.googlesource.com/c/go/+/637035\nReviewed-by: qiu laidongfeng2 <2645477756@qq.com>\nReviewed-by: Damien Neil <\n[…]\nse@google.com>\nAuto-Submit: Ian Lance Taylor <iant@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "net/http: update NewRequestWithContext wrong link to NewRequest",
          "author_name": "yincong",
          "author_login": "yincongcyincong",
          "committed_at": "2025-01-06T19:01:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a6ac8ddc9a5e1d9911941981f8e490b0c06c312a",
          "body": "Observed on a builder in an unrelated CL.\nhttps://logs.chromium.org/logs/golang/buildbucket/cr-buildbucket/8728107031663629713/+/u/step/11/log/2\n\ngoroutine 27937 gp=0xc00000f6c0 m=20 mp=0xc000085008 [running]:\npanic({0x560ac0?, 0xa1f400?})\n\tC:/b/s/w/ir/x/w/goroot/src/runtime/panic.go:806 +0x168 fp=0\n[…]\nglesource.com/c/go/+/637897\nReviewed-by: Damien Neil <dneil@google.com>\nAuto-Submit: Russ Cox <rsc@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "net/http: fix nil panic in test",
          "author_name": "Russ Cox",
          "author_login": "rsc",
          "committed_at": "2024-12-19T18:59:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "793e07030328911dfb880f9b8d5ba5fcfe07efba",
          "body": "For #67814\n\nChange-Id: I182e9c7e720493adb9d2384336e757dace818525\nReviewed-on: https://go-review.googlesource.com/c/go/+/635335\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Damien Neil <dneil@google.com>\nReviewed-by: Austin Clements <austin@google.com>",
          "is_bot": false,
          "headline": "net/http: document zero value of Protocols",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-12-11T20:15:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "92521fda264caa49849f67bad21e52c62059cc6a",
          "body": "The Go 1.24 RC is due for next week. This is a time to once again update\nall golang.org/x/... module versions that contribute packages to the\nstd and cmd modules in the standard library to latest master versions.\n\nFor #36905.\n\n[git-generate]\ngo install golang.org/x/build/cmd/updatestd@latest\ngo inst\n[…]\nuci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Michael Knyszek <mknyszek@google.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@golang.org>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "all: update vendored dependencies [generated]",
          "author_name": "Michael Anthony Knyszek",
          "author_login": "mknyszek",
          "committed_at": "2024-12-06T18:34:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f6db8b17da46052a0480798d1750d79cae277a65",
          "body": "Turns out that recomputing them (and qInv in particular) in constant\ntime is expensive, so let's not throw them away when they are available.\nThey are much faster to check, so we now do that on precompute.\n\nAlso, thanks to the opaque crypto/internal/fips140/rsa.PrivateKey type,\nwe now have some assu\n[…]\n <filippo@golang.org>\nReviewed-by: Russ Cox <rsc@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Roland Shoemaker <roland@golang.org>",
          "is_bot": false,
          "headline": "crypto/x509: keep RSA CRT values in ParsePKCS1PrivateKey",
          "author_name": "Filippo Valsorda",
          "author_login": "FiloSottile",
          "committed_at": "2024-11-30T01:49:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77d10ee4fcadd6a131b7392b2aeeb95da32c04c1",
          "body": "TestTransportRemovesH2ConnsAfterIdle is experiencing flaky\nfailures due to a bug in idle connection handling.\nUpon inspection, TestTransportRemovesH2ConnsAfterIdle\nis slow and (I think) not currently testing the condition\nthat it was added to test.\n\nUsing the new synctest package, this CL:\n\n- Adds a\n[…]\ncom/c/go/+/631795\nReviewed-by: Jonathan Amsterdam <jba@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Damien Neil <dneil@google.com>",
          "is_bot": false,
          "headline": "net/http: test for racing idle conn closure and new requests",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-11-26T18:05:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2091b03c1590b95dbf366f680fe2b25f3e444844",
          "body": "Took ~12s previously, ~0s now.\n\nChange-Id: I72580fbde73482a40142cf84cd3d78a50afb9f44\nReviewed-on: https://go-review.googlesource.com/c/go/+/630382\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Jonathan Amsterdam <jba@google.com>",
          "is_bot": false,
          "headline": "net/http: run TestServerShutdownStateNew in a synctest bubble",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-11-25T22:02:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b4c61c0119d3461dc0d5d2ca8816bcb1bde094a6",
          "body": "Previously, we'd skip installing the bundled HTTP/2 support\nif Transport.TLSNextProto is non-nil.\n\nWith the addition of the Transport.Protocols field, we'll\ninstall HTTP/2 if Protocols contains HTTP2, even if TLSNextProto\nis non-nil. However, we shouldn't do so if it already contains an\n\"h2\" entry.\n\n[…]\ncom/c/go/+/631395\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Jonathan Amsterdam <jba@google.com>\nAuto-Submit: Damien Neil <dneil@google.com>",
          "is_bot": false,
          "headline": "net/http: avoid redundant installation of HTTP/2 support in transport",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-11-25T18:39:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9696752474050ab98063585c515843d61ef641b8",
          "body": "* fixed issue+test",
          "is_bot": false,
          "headline": "Fix/issue 3 (#4)",
          "author_name": "daniel",
          "author_login": "dteh",
          "committed_at": "2024-11-24T10:41:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9351127788c8f46d12bc080166f738f801552be2",
          "body": "The Go 1.24 code freeze has recently started. This is a time to update\nall golang.org/x/... module versions that contribute packages to the\nstd and cmd modules in the standard library to latest master versions.\n\nFor #36905.\n\n[git-generate]\ngo install golang.org/x/build/cmd/updatestd@latest\ngo instal\n[…]\niewed-by: Cherry Mui <cherryyz@google.com>\nAuto-Submit: Dmitri Shuralyov <dmitshur@golang.org>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nTryBot-Bypass: Dmitri Shuralyov <dmitshur@golang.org>",
          "is_bot": false,
          "headline": "all: update vendored dependencies [generated]",
          "author_name": "Dmitri Shuralyov",
          "author_login": "dmitshur",
          "committed_at": "2024-11-22T23:14:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "113ca8d1f7f925f434feb304794126a8f8d60089",
          "body": "This makes three related changes that work particularly well together\nand would require significant extra work to do separately: it replaces\nX25519Kyber768Draft00 with X25519MLKEM768, it makes CurvePreferences\nordering crypto/tls-selected, and applies a preference to PQ key\nexchange methods over key\n[…]\nng.org>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nAuto-Submit: Filippo Valsorda <filippo@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "crypto/tls: implement X25519MLKEM768",
          "author_name": "Filippo Valsorda",
          "author_login": "FiloSottile",
          "committed_at": "2024-11-22T04:03:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ea1f4b967ce0df017a5222475603197069075ae3",
          "body": "The h2_bundle.go update was done in CL 631035,\nand the test now passes.\n\nFixes #67816.\n\nChange-Id: Icd54c2774a9e2781e7dc9342ae70c3034eb9bab9\nReviewed-on: https://go-review.googlesource.com/c/go/+/631037\nAuto-Submit: Damien Neil <dneil@google.com>\nAuto-Submit: Dmitri Shuralyov <dmitshur@golang.org>\nReviewed-by: Damien Neil <dneil@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "net/http: re-enable TestTransportServerProtocols",
          "author_name": "Dmitri Shuralyov",
          "author_login": "dmitshur",
          "committed_at": "2024-11-22T03:48:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7e0d1e87121dabd9afff213a4c7784eccd24b0a",
          "body": "Switch from Certificate.PolicyIdentifiers to Certificate.Policies when\nmarshalling.\n\nFixes #67620\n\nChange-Id: Ib627135a569f53d344b4ee2f892ba139506ce0d1\nReviewed-on: https://go-review.googlesource.com/c/go/+/629855\nReviewed-by: Damien Neil <dneil@google.com>\nReviewed-by: Filippo Valsorda <filippo@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Roland Shoemaker <roland@golang.org>",
          "is_bot": false,
          "headline": "crypto/x509: switch default policy field to Policies",
          "author_name": "Roland Shoemaker",
          "author_login": "rolandshoemaker",
          "committed_at": "2024-11-22T02:29:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b38923c46b972d1f072d4b419df93a426b4ea3c",
          "body": "Fixes #68762\n\nChange-Id: Id89c770571d7cc27c6cf7932139ec3424383a7ef\nReviewed-on: https://go-review.googlesource.com/c/go/+/629938\nReviewed-by: Roland Shoemaker <roland@golang.org>\nAuto-Submit: Filippo Valsorda <filippo@golang.org>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "crypto/rsa: refuse to generate and/or use keys smaller than 1024 bits",
          "author_name": "Filippo Valsorda",
          "author_login": "FiloSottile",
          "committed_at": "2024-11-22T01:50:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "703532ab0748b7b0b482494a69ef3f3d144a8b77",
          "body": "A part of the keeping Go's vendored dependencies and generated code\nup to date.\n\nThis updates h2_bundle.go with unencrypted HTTP/2 support.\n\nFor #36905.\nFor #67816.\n\n[git-generate]\ncd src\ngo get golang.org/x/net@v0.31.0\ngo mod tidy\ngo mod vendor\ncd cmd\ngo get golang.org/x/net@v0.31.0\ngo mod tidy\ngo \n[…]\nur@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Damien Neil <dneil@google.com>\nAuto-Submit: Dmitri Shuralyov <dmitshur@golang.org>",
          "is_bot": false,
          "headline": "all: update golang.org/x/net [generated]",
          "author_name": "Dmitri Shuralyov",
          "author_login": "dmitshur",
          "committed_at": "2024-11-22T01:35:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "800a97f6277a2e04b1d851f2e801458d07f96783",
          "body": "For #67816\n\nChange-Id: I9ba3a245d6b18758944ca5e206a15892b2aa6028\nReviewed-on: https://go-review.googlesource.com/c/go/+/630976\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@golang.org>\nAuto-Submit: Damien Neil <dneil@google.com>",
          "is_bot": false,
          "headline": "net/http: skip test which depends on h2_bundle.go update",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-11-22T01:09:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "496514dbdc0bba2c2487deb8356d73445f47106f",
          "body": "Add an UnencryptedHTTP2 protocol value.\n\nBoth Server and Transport implement \"HTTP/2 with prior knowledge\"\nas described in RFC 9113, section 3.3. Neither supports the\ndeprecated HTTP/2 upgrade mechanism (RFC 7540, section 3.2 \"h2c\").\n\nFor Server, UnencryptedHTTP2 controls whether the server\nwill acc\n[…]\n/c/go/+/622976\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Keith Randall <khr@google.com>\nReviewed-by: Brad Fitzpatrick <bradfitz@golang.org>",
          "is_bot": false,
          "headline": "net/http: add support for unencrypted HTTP/2",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-11-21T23:48:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9405d87ff5e7828ddca0331e30294e23a2a8e2fe",
          "body": "Change-Id: I07e7c8eaa5bd4bac0d576b2f2f4cd3f81b0b77a4\nReviewed-on: https://go-review.googlesource.com/c/go/+/630055\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nCommit-Queue: Ian Lance Taylor <iant@google.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>\nReviewed-by: Russ Cox <rsc@golang.org>\nAuto-Submit: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "all: fix some function names and typos in comment",
          "author_name": "cuishuang",
          "author_login": "cuishuang",
          "committed_at": "2024-11-21T22:16:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1a40bc53f25924182d0407e8ace1718e9fe73d9",
          "body": "* drop in utls\r\n\r\n* integrated utls\r\n\r\n* readme",
          "is_bot": false,
          "headline": "integrated utls (#2)",
          "author_name": "daniel",
          "author_login": "dteh",
          "committed_at": "2024-11-21T15:43:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc3ed17f8ebd766e6213e5a6865050e6d9a7a062",
          "body": "Implement header ordering",
          "is_bot": false,
          "headline": "Merge pull request #1 from dteh/feat/header-order",
          "author_name": "daniel",
          "author_login": "dteh",
          "committed_at": "2024-11-20T19:43:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c86b3f68f642d3cda229ca766b1a1c2bb22a0e3e",
          "body": "Fixes #41682\n\nChange-Id: I37760f2186e75ec7df9674db25ae466cf453d66d\nReviewed-on: https://go-review.googlesource.com/c/go/+/629676\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Filippo Valsorda <filippo@golang.org>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "crypto/x509: remove x509sha1 GODEBUG",
          "author_name": "Roland Shoemaker",
          "author_login": "rolandshoemaker",
          "committed_at": "2024-11-20T18:27:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf3e6482f265c3f89851a196914e56f017704a82",
          "body": null,
          "is_bot": false,
          "headline": "header ordering in http2",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2024-11-20T17:55:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "344aa2f44b6c58eac366fd03aa4701117d0e4e7e",
          "body": null,
          "is_bot": false,
          "headline": "http1 header ordering complete",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2024-11-20T17:36:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b62681068104b755156fad9b579e1ade836d80a",
          "body": null,
          "is_bot": false,
          "headline": "add header order keys",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2024-11-20T15:35:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bcc2b6880e2c3a042d7f06005a1b4f4835020644",
          "body": null,
          "is_bot": false,
          "headline": "set default accept-encoding header",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2024-11-20T10:43:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99f9944753ed63031a733b7feef952f1115c5530",
          "body": null,
          "is_bot": false,
          "headline": "implement h1 and h2 all encodings",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2024-11-20T10:30:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8053f87844ea3cd6587a02bcba4ddac8df133dd9",
          "body": "GOFIPS140 will be used to control whether to build binaries that\nrun in FIPS-140 mode by default, as well as which version of\ncrypto/internal/fips is used during a given build.\nIt is a target configuration variable analogous to\nGOOS, GOARCH, CGO_ENABLED, and the like, so the\ndefault value is recorde\n[…]\nrce.com/c/go/+/629196\nReviewed-by: Michael Matloob <matloob@golang.org>\nAuto-Submit: Russ Cox <rsc@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "cmd/dist: add GOFIPS140 setting",
          "author_name": "Russ Cox",
          "author_login": "rsc",
          "committed_at": "2024-11-19T18:48:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a5b577d2cbaeb11809dd657d0bcb9c2370e16740",
          "body": null,
          "is_bot": false,
          "headline": "add zstd, br, deflate to http1",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2024-11-19T17:26:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd5e300f62bace6dc3746c5106ef8f3aebf0c2d2",
          "body": "Add a new function, WithDataIndependentTiming, which takes a function as\nan argument, and encloses it with calls to set/unset the DIT PSTATE bit\non Arm64.\n\nSince DIT is OS thread-local, for the duration of the execution of\nWithDataIndependentTiming, we lock the goroutine to the OS thread, using\nLock\n[…]\n@google.com>\nReviewed-by: Filippo Valsorda <filippo@golang.org>\nReviewed-by: Michael Pratt <mpratt@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "crypto/subtle: add DIT closure",
          "author_name": "Roland Shoemaker",
          "author_login": "rolandshoemaker",
          "committed_at": "2024-11-19T16:47:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8e856addd0adf911a58fba33b646f46feb709359",
          "body": null,
          "is_bot": false,
          "headline": "add new gzip header",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2024-11-19T16:26:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2277517e141e6aecf12958f7e96dc033459d1c48",
          "body": null,
          "is_bot": false,
          "headline": "allow tasks to run",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2024-11-19T16:26:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5081006b7eb74444bfb4bf625e7a67bf3c66d7b",
          "body": null,
          "is_bot": false,
          "headline": "initial commit",
          "author_name": "Daniel Teh",
          "author_login": "dteh",
          "committed_at": "2024-11-19T15:46:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c86467ec080aa45a32d745121bb0a9dc1382eb61",
          "body": "This re-enables the behavior of CL 536399 (by effectively reverting CL\n628955), so now go test -json again includes build output and failures\nas JSON rather than text.\n\nHowever, since this behavior is clearly enough to trip up some build\nsystems, this CL includes a GODEBUG=gotestjsonbuildtext that c\n[…]\n@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@golang.org>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nAuto-Submit: Austin Clements <austin@google.com>",
          "is_bot": false,
          "headline": "cmd/go: re-enable build JSON from go test -json, now with GODEBUG",
          "author_name": "Austin Clements",
          "author_login": "aclements",
          "committed_at": "2024-11-19T02:39:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bee06626297733f95e051cb28102179366d14ed5",
          "body": "Fixes #70237\n\nChange-Id: Ieb22b6e7284cb4a40d4987b0e4b9cfb6e5158161\nReviewed-on: https://go-review.googlesource.com/c/go/+/627635\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nAuto-Submit: Dmitri Shuralyov <dmitshur@google.com>\nReviewed-by: Damien Neil <dneil@google.com>",
          "is_bot": false,
          "headline": "net/http/httputil: return after handling error",
          "author_name": "Sean Liao",
          "author_login": "seankhliao",
          "committed_at": "2024-11-18T16:43:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2e0e752341949dd196cb6d44bca7ebe721ae19b",
          "body": "On a 301 redirect, the HTTP client changes the request to be\na GET with no body.\n\nOn a 308 redirect, the client leaves the request method and\nbody unchanged.\n\nA 308 following a 301 should preserve the rewritten request\nfrom the first redirect: GET with no body. We were preserving\nthe method, but sen\n[…]\nReviewed-on: https://go-review.googlesource.com/c/go/+/626055\nReviewed-by: Jonathan Amsterdam <jba@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "net/http: 308 redirects should use the previous hop's body",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-11-06T21:01:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a4b2548840cf642ca7bb5a1643ed45c598e4fb04",
          "body": "CL 615295 changed the error message produced by the HTTP/2\nimplementation when a server sends more 1xx headers than expected.\nUpdate a test that checks for this error.\n\nFor #65035\n\nChange-Id: I57e22f6a880412e3a448e58693127540806d5ddb\nReviewed-on: https://go-review.googlesource.com/c/go/+/625195\nReviewed-by: David Chase <drchase@google.com>\nReviewed-by: Brad Fitzpatrick <bradfitz@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "net/http: handle new HTTP/2 error for 1xx limit exceeded",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-11-06T16:12:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "daf977628b8dd2ff8cc5da50757c63bac12baca5",
          "body": "Support configuring which HTTP version(s) a server or client use\nvia an explicit set of protocols. The Protocols field takes\nprecedence over TLSNextProto and ForceAttemptHTTP2.\n\nFixes #67814\n\nChange-Id: I09ece88f78ad4d98ca1f213157b5f62ae11e063f\nReviewed-on: https://go-review.googlesource.com/c/go/+/607496\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Jonathan Amsterdam <jba@google.com>\nReviewed-by: Brad Fitzpatrick <bradfitz@golang.org>",
          "is_bot": false,
          "headline": "net/http: add Protocols field to Server and Transport",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-11-05T22:14:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "add8bc7e294ae3bd65878ce743603bdaf1f61a23",
          "body": "Gets rendered at https://pkg.go.dev/internal/platform#Broken\n\nChange-Id: I128d9f02f113b1b326bc7d6a0e48fe0c944546dc\nReviewed-on: https://go-review.googlesource.com/c/go/+/624915\nReviewed-by: Ian Lance Taylor <iant@google.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>\nReviewed-by: David Chase <drchase@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "internal/platform: fix 'reportsr' typo in comment",
          "author_name": "Kristóf Havasi",
          "author_login": "lnksz",
          "committed_at": "2024-11-05T17:09:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efaa802bf3860825c7eb3f66ce7171485533de38",
          "body": "For #70130\n\nChange-Id: Idd7ca3d11b78887709b83dd5c868de9cc506ecff\nReviewed-on: https://go-review.googlesource.com/c/go/+/623835\nReviewed-by: Carlos Amedee <carlos@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Jonathan Amsterdam <jba@google.com>",
          "is_bot": false,
          "headline": "net/http: clarify ServeMux path sanitization",
          "author_name": "Sean Liao",
          "author_login": "seankhliao",
          "committed_at": "2024-10-31T19:30:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e155d2bd6d0224983e9aa5cae5e6134f45d264e5",
          "body": "…ime/maps\n\nFor #54766.\n\nCq-Include-Trybots: luci.golang.try:gotip-linux-amd64-longtest-swissmap\nChange-Id: Iebc7f5482299cb7c4ecccc4c2eb46b4bc42c5fc3\nReviewed-on: https://go-review.googlesource.com/c/go/+/616459\nReviewed-by: Keith Randall <khr@google.com>\nAuto-Submit: Michael Pratt <mpratt@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Keith Randall <khr@golang.org>",
          "is_bot": false,
          "headline": "internal/runtime/maps: enable race for map functions in internal/runt…",
          "author_name": "Michael Pratt",
          "author_login": "prattmic",
          "committed_at": "2024-10-30T14:59:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b5ad11aa2bb3040804aa450ad730e6c4e3c92a9",
          "body": "Rather than importing runtime directly, linkname the functions from\nruntime. This allows importing internal/race from internal/runtime/*\npackages, similar to internal/asan and internal/msan.\n\nFor #54766.\n\nCq-Include-Trybots: luci.golang.try:gotip-linux-amd64-longtest-swissmap\nChange-Id: Ibd964455778\n[…]\nll <khr@golang.org>\nAuto-Submit: Michael Pratt <mpratt@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Keith Randall <khr@google.com>",
          "is_bot": false,
          "headline": "internal/race,runtime: linkname contents of internal/race",
          "author_name": "Michael Pratt",
          "author_login": "prattmic",
          "committed_at": "2024-10-30T14:20:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e3901d10a0d3b5264b03d146fd1be211f12d46a",
          "body": "A GODEBUG is actually a security risk here: most programs will start to\nignore errors from Read because they can't happen (which is the intended\nbehavior), but then if a program is run with GODEBUG=randcrash=0 it will\nuse a partial buffer in case an error occurs, which may be catastrophic.\n\nNote tha\n[…]\niewed-by: Carlos Amedee <carlos@golang.org>\nReviewed-by: Roland Shoemaker <roland@golang.org>\nAuto-Submit: Filippo Valsorda <filippo@golang.org>\nReviewed-by: Daniel McCarney <daniel@binaryparadox.net>",
          "is_bot": false,
          "headline": "Revert \"crypto/rand: add randcrash=0 GODEBUG\"",
          "author_name": "Filippo Valsorda",
          "author_login": "FiloSottile",
          "committed_at": "2024-10-28T14:46:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3deca987cc69d9505a25ca3a39a0cc5246aa15bf",
          "body": "Change-Id: Ie416ed0d7abcb64e63d999b8cee5975a0fc13875\nReviewed-on: https://go-review.googlesource.com/c/go/+/622496\nAuto-Submit: Ian Lance Taylor <iant@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nCommit-Queue: Ian Lance Taylor <iant@google.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "net/http/pprof: replace sort.Slice with slices.SortFunc",
          "author_name": "Ruslan Semagin",
          "author_login": "pixel365",
          "committed_at": "2024-10-25T21:42:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "286c4cdd07442d6dc30ec1131713eb35b7b14320",
          "body": "Change-Id: I55e1c559bc73537c8cd42c213c56e2ddaf33aa44\nReviewed-on: https://go-review.googlesource.com/c/go/+/622097\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>",
          "is_bot": false,
          "headline": "net/http/pprof: fix typo in the symbol profile description",
          "author_name": "Oleksandr Redko",
          "author_login": "alexandear",
          "committed_at": "2024-10-25T15:32:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2b521cc238d4beafe38a41cecc83dc91a132c5a",
          "body": "Replace Transport's limit of 5 1xx responses with a limit based\non MaxResponseHeaderBytes: The total number of responses\n(including 1xx reponses and the final response) must not exceed\nthis value.\n\nWhen the user is reading 1xx responses using a Got1xxResponse\nclient trace hook, disable the limit: Ea\n[…]\n/go/+/615255\nReviewed-by: David Chase <drchase@google.com>\nReviewed-by: Brad Fitzpatrick <bradfitz@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "net/http: limit 1xx based on size, do not limit when delivered",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-10-24T16:10:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6c08659aa3a716bb27e801b02d18faa2ec844ab",
          "body": "Fixes #69897\n\nChange-Id: I5887f34504b39018e16f269e087b43bc6a80964b\nReviewed-on: https://go-review.googlesource.com/c/go/+/620455\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "net/http/pprof: include Symbol in Index",
          "author_name": "Sean Liao",
          "author_login": "seankhliao",
          "committed_at": "2024-10-23T20:21:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bce2e81c61a59eb77daf8e48b0ef83ff5237b18f",
          "body": "For #66821\n\nChange-Id: I525c308d6d6243a2bc805e819dcf40b67e52ade5\nReviewed-on: https://go-review.googlesource.com/c/go/+/608435\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Daniel McCarney <daniel@binaryparadox.net>\nReviewed-by: Michael Knyszek <mknyszek@google.com>\nReviewed-by: Roland Shoemaker <roland@golang.org>",
          "is_bot": false,
          "headline": "crypto/rand: add randcrash=0 GODEBUG",
          "author_name": "Filippo Valsorda",
          "author_login": "FiloSottile",
          "committed_at": "2024-10-07T15:34:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fcb18dd4541893e154d788b48e9fbfd2f908124",
          "body": "The fallback was reachable on\n\n    - Linux, where starting in Go 1.24 we require a kernel with\n      getrandom(2), see #67001.\n\n    - FreeBSD, which added getrandom(2) in FreeBSD 12.0, which we\n      require since Go 1.19.\n\n    - OpenBSD, which added getentropy(2) in OpenBSD 5.6, and we only\n      s\n[…]\nang.org>\nReviewed-by: David Chase <drchase@google.com>\nReviewed-by: Daniel McCarney <daniel@binaryparadox.net>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "crypto/rand: remove /dev/urandom fallback and improve getrandom batching",
          "author_name": "Filippo Valsorda",
          "author_login": "FiloSottile",
          "committed_at": "2024-10-07T15:33:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "28a5d9597ddf3ba70f710fc672bf521b68506fc5",
          "body": "Remove an unexported field from ServeMux that was there only to support\nsome Google-internal packages. It is no longer needed.\n\nChange-Id: I6a4d542c6c016f5a9f3d24d0c73f6ddd44c9562e\nReviewed-on: https://go-review.googlesource.com/c/go/+/616355\nReviewed-by: Chressie Himpel <chressie@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Damien Neil <dneil@google.com>",
          "is_bot": false,
          "headline": "src/net/http: remove ServeMux.patterns",
          "author_name": "Jonathan Amsterdam",
          "author_login": "jba",
          "committed_at": "2024-10-02T15:22:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "33c0d4ee53705e43d479127d2a82c25e570ed3a8",
          "body": "Use slices.Sorted(maps.Keys(m)) to get a sorted slices of the keys in\na map.\n\nDo not change packages built during bootstrap, as the bootstrap compiler\n(currently 1.22.6) does not have the required maps and slices functions.\n\nChange-Id: Ie35565d241fa14aca56b730a69af010127b659ab\nReviewed-on: https://g\n[…]\ncom>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Michael Knyszek <mknyszek@google.com>\nAuto-Submit: Tobias Klauser <tobias.klauser@gmail.com>",
          "is_bot": false,
          "headline": "all: use slices.Sorted(maps.Keys(m))",
          "author_name": "Tobias Klauser",
          "author_login": "tklauser",
          "committed_at": "2024-10-02T14:22:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "05a1ae6098c88e13c5f6dd4f10b89c9031d362d3",
          "body": "This change adds a new environment variable GOAUTH which takes a semicolon-separated list of commands to run for authentication during go-import resolution and HTTPS module mirror protocol interactions.\nThis CL only supports netrc and off. Future CLs to follow will extend support to git and a custom\n[…]\n/go/+/605256\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Michael Matloob <matloob@golang.org>\nReviewed-by: Alan Donovan <adonovan@google.com>",
          "is_bot": false,
          "headline": "cmd/go: add GOAUTH mechanism for HTTP authentication",
          "author_name": "Sam Thanawalla",
          "author_login": "samthanawalla",
          "committed_at": "2024-10-01T15:21:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "99fef71e5e526194cf9087dda91030019389c527",
          "body": "Use sync.OnceFunc and sync.OnceValue to simplify the code.\n\nChange-Id: Ie47e0444c2b9d3260f6ef94cdc6ee8ee5bcf9f71\nGitHub-Last-Rev: 520afbec2a392d73dfd9697035804be7c7cc8b77\nGitHub-Pull-Request: golang/go#69634\nReviewed-on: https://go-review.googlesource.com/c/go/+/616037\nAuto-Submit: Ian Lance Taylor \n[…]\niant@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>\nReviewed-by: David Chase <drchase@google.com>",
          "is_bot": false,
          "headline": "net/http: use sync.OnceFunc, sync.OnceValue",
          "author_name": "apocelipes",
          "author_login": "apocelipes",
          "committed_at": "2024-09-26T19:49:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f72c92b7a1a86ff034c2fa7fb623c2285e00c4dd",
          "body": "Change-Id: If8e02760fe1fb095ecebc306fd98662a51a1f66f\nGitHub-Last-Rev: 7b8099f1fed04271c121cdde1c3abd8822955368\nGitHub-Pull-Request: golang/go#69426\nReviewed-on: https://go-review.googlesource.com/c/go/+/612736\nReviewed-by: Tim King <taking@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "net/http: make use of maps.Copy",
          "author_name": "Jes Cok",
          "author_login": "callthingsoff",
          "committed_at": "2024-09-13T17:00:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efa8982092e2914a93105395b5f369fa7a7e8822",
          "body": "All the users of HasSrc call t.Skip anyway, so let's move it to testenv.\n\nFix go/build to use MustHaveSource rather than MustHaveGoBuild where\nappropriate.\n\nChange-Id: I052bf96fd5a5780c1930da5b3a52b7a8dbebea46\nReviewed-on: https://go-review.googlesource.com/c/go/+/612057\nReviewed-by: Ian Lance Taylo\n[…]\no LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>\nReviewed-by: Tim King <taking@google.com>\nAuto-Submit: Tim King <taking@google.com>",
          "is_bot": false,
          "headline": "internal/testenv: add MustHaveSource, rm HasSrc",
          "author_name": "Kir Kolyshkin",
          "author_login": "kolyshkin",
          "committed_at": "2024-09-13T16:56:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3e528304a1c27d862210d75f3d38b3c8d615afd",
          "body": "Not a big deal, maybe it's a bit clearer that it's cloning a map.\n\nChange-Id: I7c85382a01df97d1f58109b2483061e6decdf03a\nGitHub-Last-Rev: 7a88af7f56ab7ad017081187e226e901752fa8bc\nGitHub-Pull-Request: golang/go#69357\nReviewed-on: https://go-review.googlesource.com/c/go/+/612015\nAuto-Submit: Damien Nei\n[…]\n<dneil@google.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Damien Neil <dneil@google.com>",
          "is_bot": false,
          "headline": "net/http: make use of maps.Clone for Transport.{Clone, RegisterProtocol}",
          "author_name": "Jes Cok",
          "author_login": "callthingsoff",
          "committed_at": "2024-09-10T19:59:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3487867036d23f8fc6d024c7e9ccf0da5bb027bc",
          "body": "All changes are related to the code, except for the comments in src/regexp/syntax/parse.go and src/slices/slices.go.\n\nChange-Id: I73c5d3c54099749b62210aa7f3182c5eb84bb6a6\nGitHub-Last-Rev: 794aa9b0539811d00e1cd42be1e8d9fe9afe0281\nGitHub-Pull-Request: golang/go#69170\nReviewed-on: https://go-review.goo\n[…]\nur@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "all: omit unnecessary 0 in slice expression",
          "author_name": "nlwkobe30",
          "author_login": "apriil15",
          "committed_at": "2024-09-03T20:55:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8e67f54e5ba3b2d7d6ed555bb3d9ce6334a73597",
          "body": "As some callers don't have a testing context, modify testenv.Executable\nto accept nil (similar to how testenv.GOROOT works).\n\nChange-Id: I39112a7869933785a26b5cb6520055b3cc42b847\nReviewed-on: https://go-review.googlesource.com/c/go/+/609835\nReviewed-by: Ian Lance Taylor <iant@google.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>",
          "is_bot": false,
          "headline": "math,os,os/*: use testenv.Executable",
          "author_name": "Kir Kolyshkin",
          "author_login": "kolyshkin",
          "committed_at": "2024-09-03T20:11:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3eaab192e0c5281c1fe81d044d455b405b0748a5",
          "body": "...and move a few so they won't be called when not needed.\n\nChange-Id: I024b9552ed5ed839cde4fbae4815ec6ba8b67265\nReviewed-on: https://go-review.googlesource.com/c/go/+/609300\nReviewed-by: Ian Lance Taylor <iant@google.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "internal/testenv: add missing t.Helper calls",
          "author_name": "Kir Kolyshkin",
          "author_login": "kolyshkin",
          "committed_at": "2024-09-03T19:33:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd460953eef6e12e8742c59a946b174da5b44dbf",
          "body": "On some platforms (android, wasip1) this function is called many\ntimes which probably results in some slowdown, especially for wasip1.\n\nWrap it into sync.OnceValues.\n\nChange-Id: Id290ffd8d1e7ad806302f457e8fff2e3123b49a5\nReviewed-on: https://go-review.googlesource.com/c/go/+/609418\nLUCI-TryBot-Result\n[…]\ncoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "internal/testenv: use sync.OnceValues for hasSymlink",
          "author_name": "Kir Kolyshkin",
          "author_login": "kolyshkin",
          "committed_at": "2024-09-03T19:31:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4533d55283b668a8f94f245bfd6fb901844b3f29",
          "body": "Tests commonly use code to get os.Executable value, and some cache the\nresulting value.\n\nTo reduce code duplication, add a helper that does just that.\n\nChange-Id: I9dd7eb24e24a3abd92be2b87227e823f0fca5cb3\nReviewed-on: https://go-review.googlesource.com/c/go/+/609301\nReviewed-by: Cherry Mui <cherryyz\n[…]\nnt@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Alan Donovan <adonovan@google.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "internal/testenv: add Executable",
          "author_name": "Kir Kolyshkin",
          "author_login": "kolyshkin",
          "committed_at": "2024-09-03T18:03:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "963fb9e3e3eb66c7d26d9ef4dcb24225c64a8670",
          "body": "A previous change [1] was introduced to enable MPTCP by default\nfor both the clients and servers, based on the discussions [2] in\ngolang#56539, where MPTCP would be an opt-in for a release or\ntwo, and then would become an opt-out.\n\nThis change was not accepted at the time because the support for\na f\n[…]\nm>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>\nReviewed-by: Matthieu Baerts <matttbe@kernel.org>\nAuto-Submit: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "net: enable multipath TCP by default for listeners",
          "author_name": "Aperence",
          "author_login": "Aperence",
          "committed_at": "2024-09-03T15:27:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "09de7f39a8f00786a8a2bde6d9e0b547620d9d15",
          "body": "1. Combine two functions into one.\n\n2. Use errors.Is to check for wrapped errors.\n\n3. Use sync.OnceValues.\n\nChange-Id: I25f55d31bb658ff08da209b1740e9dff579cca69\nReviewed-on: https://go-review.googlesource.com/c/go/+/609797\nReviewed-by: Ian Lance Taylor <iant@google.com>\nAuto-Submit: Ian Lance Taylor\n[…]\nt@golang.org>\nReviewed-by: Alan Donovan <adonovan@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nCommit-Queue: Ian Lance Taylor <iant@golang.org>",
          "is_bot": false,
          "headline": "internal/testenv: simplify hasSymlink for windows",
          "author_name": "Kir Kolyshkin",
          "author_login": "kolyshkin",
          "committed_at": "2024-08-30T17:09:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "49862c49716678298a82b158d2bc0c1cd27dd444",
          "body": "Modernize the code to use sync.OnceValue[s] instead of sync.Once.\n\nWhile at it, reuse the result of exec.LookPath(\"go\") in tryGoBuild.\n\nChange-Id: I13eff3dd55797846680e506fffb7c49c8296829d\nReviewed-on: https://go-review.googlesource.com/c/go/+/609796\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-p\n[…]\nnt.com>\nAuto-Submit: Ian Lance Taylor <iant@golang.org>\nReviewed-by: Alan Donovan <adonovan@google.com>\nCommit-Queue: Ian Lance Taylor <iant@golang.org>\nReviewed-by: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "internal/testenv: use sync.OnceValue[s]",
          "author_name": "Kir Kolyshkin",
          "author_login": "kolyshkin",
          "committed_at": "2024-08-30T17:08:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "da40d292de7f2a7272dd899ca6cd77681f0c9622",
          "body": "Change-Id: I048474fc93bb8c149672b66f98d71eec0eb8aad7\nReviewed-on: https://go-review.googlesource.com/c/go/+/609795\nReviewed-by: Ian Lance Taylor <iant@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Alan Donovan <adonovan@google.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "internal/testenv: MustHaveExec: use sync.OnceValue",
          "author_name": "Kir Kolyshkin",
          "author_login": "kolyshkin",
          "committed_at": "2024-08-30T16:26:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "335df8efe93f331e9a62dbb3161b1e49fa50067d",
          "body": "Add a field to Server and Transport containing HTTP/2 configuration\nparameters.\n\nThis field will have no effect until golang.org/x/net/http2 is updated\nto make use of it, and h2_bundle.go is updated with the new http2\npackage.\n\nFor #67813\n\nChange-Id: I81d7f8e9ddea78f9666383983aec43e3884c13ed\nReviewed-on: https://go-review.googlesource.com/c/go/+/602175\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Jonathan Amsterdam <jba@google.com>",
          "is_bot": false,
          "headline": "net/http: add HTTP2Config",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-08-29T17:38:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0825bc5ec449864ab754144ef9ffe84aadf2be9d",
          "body": "By using maps.Clone and omitting nil checks when calling\nhttp.Header.Clone.\n\nI'm not using slices.Clone because the result of slices.Clone\nmay have additional unused capacity.\n\nChange-Id: I4aed0fea218404c7270e35324e6bd62d855296c7\nGitHub-Last-Rev: 9fd5dd59078c69c9a8057f6fc4a90f7c6aac893b\nGitHub-Pull-\n[…]\n <dneil@google.com>\nAuto-Submit: Damien Neil <dneil@google.com>\nReviewed-by: Michael Pratt <mpratt@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "net/http: simplify http.Request.Clone",
          "author_name": "Jes Cok",
          "author_login": "callthingsoff",
          "committed_at": "2024-08-27T17:40:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "46476cda7384766b9b1ff8e3da1332fa3defb4c4",
          "body": "Makes calls to the global Seed a no-op. The GODEBUG=randseednop=0\nsetting can be used to revert this behavior.\n\nFixes #67273\n\nChange-Id: I79c1b2b23f3bc472fbd6190cb916a9d7583250f4\nReviewed-on: https://go-review.googlesource.com/c/go/+/606055\nAuto-Submit: Cherry Mui <cherryyz@google.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "math/rand: make calls to Seed no-op",
          "author_name": "Paschalis T",
          "author_login": "tpaschalis",
          "committed_at": "2024-08-19T20:47:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d46128898e33bd5a0f77d121ed84310196675c59",
          "body": "The port is reportedly broken, and there isn't a builder testing it.\n\nFor #68552.\nFor #67308.\n\nChange-Id: Iababa17cdf855b675aaf85642a667e8081ef5dfe\nReviewed-on: https://go-review.googlesource.com/c/go/+/601777\nReviewed-by: Ian Lance Taylor <iant@google.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Dmitri Shuralyov <dmitshur@golang.org>",
          "is_bot": false,
          "headline": "cmd/dist, internal/platform: mark windows/arm (32-bit ARM) broken",
          "author_name": "Dmitri Shuralyov",
          "author_login": "dmitshur",
          "committed_at": "2024-08-14T20:56:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56b6ec2d326bdcd9f18ca5ba89a027ed47499666",
          "body": "Change-Id: Ic57c93a8d8413fe4985bc430255b6db90e11b70c\nGitHub-Last-Rev: 25db6644c6cd3ae532796b18f8978f84a51376af\nGitHub-Pull-Request: golang/go#68397\nReviewed-on: https://go-review.googlesource.com/c/go/+/597936\nReviewed-by: Damien Neil <dneil@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Damien Neil <dneil@google.com>\nReviewed-by: Carlos Amedee <carlos@golang.org>\nReviewed-by: Emmanuel Odeke <emmanuel@orijtech.com>",
          "is_bot": false,
          "headline": "net/http/httputil: close res body in test",
          "author_name": "guoguangwu",
          "author_login": "testwill",
          "committed_at": "2024-08-14T18:15:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d584b23f33539589f64917db9368cc9e023fdc5c",
          "body": "This CL adds support of \"library\", i.e. c-shared, build mode on\nwasip1. When -buildmode=c-shared is set, it builds a Wasm module\nthat is intended to be used as a library, instead of an executable.\nIt does not have the _start function. Instead, it has an\n_initialize function, which initializes the ru\n[…]\n16\nReviewed-by: Achille Roussel <achille.roussel@gmail.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Michael Knyszek <mknyszek@google.com>",
          "is_bot": false,
          "headline": "cmd/link, runtime: support library mode on wasip1",
          "author_name": "Cherry Mui",
          "author_login": "cherrymui",
          "committed_at": "2024-08-13T21:27:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "14e3ca456047419c382aef4c23117d4e79d59f61",
          "body": "\"receiver name `srv` should be consistent with the previous receiver name\n`s` for Server\" according to go-lint.\n\nChange-Id: I3071ae30b7c1375999e5a599a0eee7b88494f17e\nGitHub-Last-Rev: 093c7679b1919f364ed542904203d22ed2048313\nGitHub-Pull-Request: golang/go#65787\nReviewed-on: https://go-review.googleso\n[…]\n <dneil@google.com>\nReviewed-by: Carlos Amedee <carlos@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Damien Neil <dneil@google.com>",
          "is_bot": false,
          "headline": "net/http: rename server receiver for consistency",
          "author_name": "wineandchord",
          "author_login": "WineChord",
          "committed_at": "2024-08-13T16:44:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "caa8b47b9721f90244cc8bd537cc1db7bbd4ccf2",
          "body": "Fixes #67697\n\nChange-Id: I26b26262d885d0704851c08c79e7b2b4872b65ad\nReviewed-on: https://go-review.googlesource.com/c/go/+/598075\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Damien Neil <dneil@google.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>",
          "is_bot": false,
          "headline": "net/http: match os.File.Readdir behavior in DotFileHiding",
          "author_name": "Sean Liao",
          "author_login": "seankhliao",
          "committed_at": "2024-07-30T23:08:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d968d167b3683933746360fe8b6b8cbb4cfcef82",
          "body": "Responses to HEAD requests don't have a body.\n\nThe ResponseWriter automatically discards writes to the response body\nwhen responding to a HEAD request. ResponseWriter.ReadFrom was failing\nto discard writes under some circumstances; fix it to do so.\n\nFixes #68609\n\nChange-Id: I912f6b2b2a535df28ae37b87\n[…]\nitz@golang.org>\nAuto-Submit: Damien Neil <dneil@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Michael Knyszek <mknyszek@google.com>",
          "is_bot": false,
          "headline": "net/http: don't write HEAD response body in ResponseWriter.ReadFrom",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-07-29T21:29:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0bf5c19e2a1a134799aa9e0bc3365d18bb5c3aa",
          "body": "Use the TrimPrefix, TrimSuffix and CutPrefix to simplify the code.\n\nChange-Id: I3e2b271ec0d3f9ce664b830e2b0c21ab47337ed0\nGitHub-Last-Rev: 4bd1577d2496173800d609da75b08f6de177aba9\nGitHub-Pull-Request: golang/go#68629\nReviewed-on: https://go-review.googlesource.com/c/go/+/601675\nLUCI-TryBot-Result: Go\n[…]\nscoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>\nReviewed-by: Michael Knyszek <mknyszek@google.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "cmd,log,net,runtime: simplify string prefix and suffix processing",
          "author_name": "apocelipes",
          "author_login": "apocelipes",
          "committed_at": "2024-07-29T21:29:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a5c25888de6edba84f2547b5e932d56f14dc4e7",
          "body": "Fixes #62015\n\nChange-Id: I88c5427f85e740d5b956942bb1c2727dac2935ea\nReviewed-on: https://go-review.googlesource.com/c/go/+/601238\nReviewed-by: Michael Knyszek <mknyszek@google.com>\nReviewed-by: Brad Fitzpatrick <bradfitz@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "net/http: don't write body for HEAD responses in Response.Write",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-07-29T21:26:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0b0f250d1691fce02e0e4a92358ad174d37c521",
          "body": "Common up the the \"known OS/Arch\" tables from { cmd/go/internal/imports,\ncmd/go/internal/modindex, go/build } and relocate them to a new\npackage, internal/syslist. No change in functionality.\n\nUpdates #68606.\n\nChange-Id: I6414a05c96b8fddbdbd9678d322cb49d9b1b0af3\nReviewed-on: https://go-review.google\n[…]\n/go/+/601357\nReviewed-by: Ian Lance Taylor <iant@golang.org>\nReviewed-by: Michael Matloob <matloob@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "cmd: consolidate \"known\" os/arch tables into separate package",
          "author_name": "Than McIntosh",
          "author_login": "thanm",
          "committed_at": "2024-07-29T15:38:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2274c5c31f89fde146d9070ff0eff4a93c15a1fd",
          "body": "Replace reflect.DeepEqual with slices.Equal/maps.Equal, which is\nmuch faster.\n\nChange-Id: Id9cb550884da817da96befdeccfecb3325fb4414\nGitHub-Last-Rev: 7d64d78feb86e3ea1af6c24ea6782cb85731bb52\nGitHub-Pull-Request: golang/go#67612\nReviewed-on: https://go-review.googlesource.com/c/go/+/587819\nLUCI-TryBot\n[…]\ncoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "go,internal,io,mime: use slices and maps to clean tests",
          "author_name": "apocelipes",
          "author_login": "apocelipes",
          "committed_at": "2024-07-25T00:22:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e4cc4c0bce0c6187d4e1fd45899ee7c41d89f077",
          "body": "Replace reflect.DeepEqual with slices.Equal/maps.Equal, which is\nmuch faster.\n\nChange-Id: I54600fb63a56460c11d3d5af9072da585e31b1a2\nGitHub-Last-Rev: 08c1445ad5be94d071e8ceb4b060b8f4ab0d77ba\nGitHub-Pull-Request: golang/go#67606\nReviewed-on: https://go-review.googlesource.com/c/go/+/587816\nReviewed-by\n[…]\noogle.com>\nReviewed-by: Dmitri Shuralyov <dmitshur@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Ian Lance Taylor <iant@google.com>",
          "is_bot": false,
          "headline": "net: use slices and maps to clean up tests",
          "author_name": "apocelipes",
          "author_login": "apocelipes",
          "committed_at": "2024-07-25T00:20:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c6da87d1b57dfae19b14e34a790da3aaac356f97",
          "body": "The Go 1.24 development tree has opened. This is a time to update\nall golang.org/x/... module versions that contribute packages to the\nstd and cmd modules in the standard library to latest master versions.\n\nFor #36905.\n\n[git-generate]\ngo install golang.org/x/build/cmd/updatestd@latest\ngo install gol\n[…]\n@google.com>\nReviewed-by: Cherry Mui <cherryyz@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nAuto-Submit: Dmitri Shuralyov <dmitshur@golang.org>",
          "is_bot": false,
          "headline": "all: update vendored dependencies",
          "author_name": "Dmitri Shuralyov",
          "author_login": "dmitshur",
          "committed_at": "2024-07-23T20:29:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d4963acc72df6c33cedf9b0d7704b69fe1222853",
          "body": "Using the same wording as http.FS, even though it's not strictly\nrequired if a content type can be determined by file extension.\n\nFixes #66877\nUpdates #44553\n\nChange-Id: I7b70c10909bdd289a57d1998a565262b8aaf2dd2\nReviewed-on: https://go-review.googlesource.com/c/go/+/597977\nReviewed-by: Damien Neil <\n[…]\nt@google.com>\nCommit-Queue: Ian Lance Taylor <iant@google.com>\nReviewed-by: Ian Lance Taylor <iant@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "net/http: document io.Seeker requirement for fs.FS arguments",
          "author_name": "Sean Liao",
          "author_login": "seankhliao",
          "committed_at": "2024-07-15T16:32:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0ba13edbf6c484b00e738a7d50efa76114e98ee5",
          "body": "This CL is similar to CL 562557, and it takes over CL 594175.\n\nWhile here, unrelatedly remove mapKeys function, use slices.Sorted(maps.Keys(ms))\nto simplify code.\n\nFixes #67657\n\nChange-Id: Id8b99216f87a6dcfd6d5fa61407b515324c79112\nReviewed-on: https://go-review.googlesource.com/c/go/+/594737\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Jonathan Amsterdam <jba@google.com>\nReviewed-by: Joedian Reid <joedian@google.com>",
          "is_bot": false,
          "headline": "net/http: avoid appending an existing trailing slash to path again",
          "author_name": "Jes Cok",
          "author_login": "callthingsoff",
          "committed_at": "2024-06-28T17:01:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cac852a966b18d9cd4f5008ff197d7cb4f90efc7",
          "body": "Fixes #36095\n\nChange-Id: I94ae014b0ee45b4aeb38cb247e42cfc13f663ded\nReviewed-on: https://go-review.googlesource.com/c/go/+/593175\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>\nReviewed-by: Jonathan Amsterdam <jba@google.com>",
          "is_bot": false,
          "headline": "net/http: document that Request.Clone does not deep copy Body",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-06-24T17:21:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a79c92b22144a125fce05581785d23eddd48ecda",
          "body": "The original implementation could not support a non-default metric,\nbut now that it is set during package time, we can. Do that.\n\n\nChange-Id: If7929b0afa5b0142d299718d9bd811c5a8d1cf93\nReviewed-on: https://go-review.googlesource.com/c/go/+/589058\nReviewed-by: Michael Knyszek <mknyszek@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "time: provide non-default metric for asynctimerchan",
          "author_name": "Russ Cox",
          "author_login": "rsc",
          "committed_at": "2024-06-21T12:36:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12615ab3e43adbc87b628edda86ef2ed2087797c",
          "body": "The pre-Go 1.23 behavior is httpservecontentkeepheaders=1.\n\nFor #66343\n\nChange-Id: If6f92853b38522f19a8908ff11ac49b12f3dc3e0\nReviewed-on: https://go-review.googlesource.com/c/go/+/593775\nReviewed-by: David Chase <drchase@google.com>\nAuto-Submit: Damien Neil <dneil@google.com>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "internal/godebugs: fix old value for httpservecontentkeepheaders",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-06-20T17:46:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce8ad8051d5fbcbf0804afd7f69387ed19b2cc56",
          "body": "This reverts the changes to Error from CL 571995, and adds a\nGODEBUG controlling the changes to ServeContent/ServeFile/ServeFS.\n\nThe change to remove the Content-Encoding header when serving an error\nbreaks middleware which sets Content-Encoding: gzip and wraps a\nResponseWriter in one which compress\n[…]\nbf86c6a38\nReviewed-on: https://go-review.googlesource.com/c/go/+/593157\nReviewed-by: Russ Cox <rsc@golang.org>\nLUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>",
          "is_bot": false,
          "headline": "net/http: keep Content-Encoding in Error, add GODEBUG for ServeContent",
          "author_name": "Damien Neil",
          "author_login": "neild",
          "committed_at": "2024-06-18T19:33:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 5,
      "commits_last_year": 8,
      "latest_release_at": "2026-06-10T22:32:18Z",
      "latest_release_tag": "v1.26.1",
      "releases_from_tags": false,
      "days_since_last_push": 4,
      "active_weeks_last_year": 3,
      "days_since_latest_release": 41,
      "mean_days_between_releases": 4.6
    },
    "community": {
      "has_readme": true,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 14,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/dteh/dhttp",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/dteh/dhttp",
          "is_deprecated": false,
          "latest_version": "v1.27.0",
          "repository_url": "https://github.com/dteh/dhttp",
          "versions_count": 7,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-17T18:34:35Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 4
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 1,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 399527,
      "source_files_sampled": 241,
      "oversized_source_files": 7,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 17763
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.36.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 10,
            "advisory_ids": [
              "GHSA-45gg-vh54-h5m9",
              "GHSA-5cgq-3rg8-m6cv",
              "GHSA-78mq-xcr3-xm33",
              "GHSA-89gr-r52h-f8rx",
              "GHSA-9m57-25v3-79x9",
              "GHSA-f5wc-c3c7-36mc",
              "GHSA-f6x5-jh6r-wrfv",
              "GHSA-j5w8-q4qc-rx2x",
              "GHSA-jppx-rxg9-jmrx",
              "GHSA-q4h4-gmj2-qvw2"
            ],
            "fixed_version": "0.52.0",
            "advisory_count": 32,
            "oldest_advisory_days": 250
          },
          {
            "name": "golang.org/x/net",
            "direct": true,
            "version": "v0.38.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-5cv4-jp36-h3mw",
              "GO-2026-4440",
              "GO-2026-4441",
              "GO-2026-4918",
              "GO-2026-5025",
              "GO-2026-5026",
              "GO-2026-5027",
              "GO-2026-5028",
              "GO-2026-5029",
              "GO-2026-5030"
            ],
            "fixed_version": "1.26.3",
            "advisory_count": 11,
            "oldest_advisory_days": 166
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.31.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 60
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.23.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5970"
            ],
            "fixed_version": "0.39.0",
            "advisory_count": 1,
            "oldest_advisory_days": 7
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 2,
          "critical": 1,
          "moderate": 1
        },
        "advisory_count": 45,
        "affected_count": 4,
        "assessed_count": 7,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/andybalholm/brotli",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.1"
        },
        {
          "name": "github.com/klauspost/compress",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.17.11"
        },
        {
          "name": "github.com/refraction-networking/utls",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.2"
        },
        {
          "name": "golang.org/x/net",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.38.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "github.com/andybalholm/brotli",
            "direct": true,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": true,
            "version": "v1.17.11",
            "ecosystem": "go"
          },
          {
            "name": "github.com/refraction-networking/utls",
            "direct": true,
            "version": "v1.8.2",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": true,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.31.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.23.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 7,
        "direct_count": 4,
        "indirect_count": 3
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 4,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 1,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 4,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "bradfitz",
          "commits": 497,
          "avatar_url": "https://avatars.githubusercontent.com/u/2621?v=4"
        },
        {
          "type": "User",
          "login": "neild",
          "commits": 121,
          "avatar_url": "https://avatars.githubusercontent.com/u/52544?v=4"
        },
        {
          "type": "User",
          "login": "rsc",
          "commits": 77,
          "avatar_url": "https://avatars.githubusercontent.com/u/104030?v=4"
        },
        {
          "type": "User",
          "login": "odeke-em",
          "commits": 63,
          "avatar_url": "https://avatars.githubusercontent.com/u/4898263?v=4"
        },
        {
          "type": "User",
          "login": "dmitshur",
          "commits": 39,
          "avatar_url": "https://avatars.githubusercontent.com/u/1924134?v=4"
        },
        {
          "type": "User",
          "login": "FiloSottile",
          "commits": 26,
          "avatar_url": "https://avatars.githubusercontent.com/u/1225294?v=4"
        },
        {
          "type": "User",
          "login": "dteh",
          "commits": 26,
          "avatar_url": "https://avatars.githubusercontent.com/u/5299236?v=4"
        },
        {
          "type": "User",
          "login": "jba",
          "commits": 25,
          "avatar_url": "https://avatars.githubusercontent.com/u/18483045?v=4"
        },
        {
          "type": "User",
          "login": "mvdan",
          "commits": 22,
          "avatar_url": "https://avatars.githubusercontent.com/u/3576549?v=4"
        },
        {
          "type": "User",
          "login": "ianlancetaylor",
          "commits": 20,
          "avatar_url": "https://avatars.githubusercontent.com/u/3194333?v=4"
        }
      ],
      "contributors_sampled": 100,
      "top_contributor_share": 0.336
    },
    "quality_signals": {
      "has_ci": false,
      "has_tests": true,
      "ci_workflows": [],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 0,
            "reason": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/13 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 63 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": null,
            "reason": "no workflows found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 0,
            "reason": "license file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 6,
            "reason": "8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": null,
            "reason": "no dependencies found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": null,
            "reason": "No tokens found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "29 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "17eca5149553e0319aceb5e2fe16b89e899c2d67",
        "ran_at": "2026-07-22T08:21:47Z",
        "aggregate_score": 2.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-17T18:34:40Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2025-01-30T14:02:22Z",
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/dteh/dhttp",
    "host": "github.com",
    "name": "dhttp",
    "owner": "dteh"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 48,
      "inputs": {
        "security": 30,
        "vitality": 72,
        "community": 12,
        "governance": 78,
        "engineering": 30
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 72,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "commits_last_year": 8,
              "human_commit_share": 1,
              "days_since_last_push": 4,
              "active_weeks_last_year": 3
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "3/52 weeks with commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "8 commits in the last year",
                "points": 8.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 5,
              "latest_release_tag": "v1.26.1",
              "releases_from_tags": false,
              "days_since_latest_release": 41,
              "mean_days_between_releases": 4.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "5 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 41 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 41
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~4.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 4.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 4,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 4 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 12,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": true,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "no license file detected",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "license_absent",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 78,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "bus_factor": 4,
              "contributors_sampled": 100,
              "top_contributor_share": 0.336
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "4 contributor(s) cover half of all commits",
                "points": 43.2,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 34% of commits",
                "points": 14.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 34
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "100 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 100
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 63 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "merged_prs": 4,
              "open_issues": 0,
              "closed_issues": 1,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "4/4 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 4,
                      "decided": 4
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/13 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 49,
            "inputs": {
              "followers": 7,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "dteh",
              "public_repos": 27,
              "account_age_days": 4715
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "7 followers of dteh",
                "points": 6.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 7,
                      "login": "dteh"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "27 public repos, account ~12 yr old",
                "points": 22.5,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 27
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 12
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/dteh/dhttp"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 4
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 4 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "7 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 30,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "critical",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 24,
            "inputs": {
              "has_ci": false,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 30,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "dangerous_workflow",
                    "packaging",
                    "pinned_dependencies",
                    "signed_releases",
                    "token_permissions"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 21,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 13,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 5,
              "scorecard_aggregate": 2.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/13 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 63 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no workflows found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "No tokens found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "29 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 7 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 7
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "source": "osv",
              "advisories": 45,
              "affected_packages": 4,
              "assessed_packages": 7,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 1, moderate 1, unknown 2",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: golang.org/x/net v0.38.0 (moderate 6.5)",
                "points": 16.8,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "golang.org/x/net v0.38.0 (moderate 6.5)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 166 days ago",
                "points": 34.4,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 166
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 7,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 15
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 82,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.88,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 17763
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "88 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 88,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_pinned_dependencies"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 73,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.07,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "7 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 7,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "no dependencies found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 399527,
              "source_files_sampled": 241,
              "oversized_source_files": 7
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "7/241 source files over 60KB",
                "points": 53.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 241,
                      "oversized": 7
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [],
  "report_type": "repository",
  "generated_at": "2026-07-22T08:22:09.662937Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/dteh/dhttp.svg",
  "full_name": "dteh/dhttp",
  "license_state": "absent",
  "license_spdx": null
}