erofs/go-erofs holds a health index of 73 out of 100, placing it in the Good band. It scores highest on Vitality (76/100) and lowest on Community & Adoption (43/100). It was last updated 9 days ago. A single contributor accounts for most of its recent work.
73
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
73
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 64 is calibrated to 73 on the published index scale (record calibration 2026-08-02).
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Manageable file sizes — 0/37 source files over 60KB
Inputs used
primary_language
Go
largest_source_bytes
58,871
source_files_sampled
37
oversized_source_files
0
Key facts
25GitHub stars
8contributors
46commits, last 12 months
9days since last push
5releases
1bus factor
1open issues
Gopackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 19 ⇿
0Stars
19Forks
5Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 3Patch 2
OpenSSF Scorecard 6.8 / 10
6.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-31 03:56 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 399,
"has_wiki": false,
"homepage": null,
"languages": {
"Go": 337330
},
"pushed_at": "2026-07-21T15:05:46Z",
"created_at": "2025-01-30T09:14:24Z",
"owner_type": "Organization",
"updated_at": "2026-07-25T09:09:37Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://erofs.docs.kernel.org",
"name": "EROFS filesystem project",
"type": "Organization",
"login": "erofs",
"company": null,
"location": null,
"followers": 63,
"avatar_url": "https://avatars.githubusercontent.com/u/42120421?v=4",
"created_at": "2018-08-05T18:06:47Z",
"is_verified": null,
"public_repos": 19,
"account_age_days": 2916
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-07-21T00:31:48Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-04-19T05:50:46Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-04-09T20:12:44Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-04-02T05:40:50Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-03-14T00:16:41Z"
}
],
"recent_commits": [
{
"oid": "622ddde0629e32e07b119b308e59b419fcb76bd9",
"body": "Chunk-based inodes store their chunk-index map aligned to\nsizeof(erofs_inode_chunk_index) (8 bytes). Both the Linux kernel erofs\ndriver (fs/erofs/data.c: ALIGN(iloc + inode_isize + xattr_isize, unit))\nand this package's reader (loadBlock, LayoutChunkBased) read the map at\nthat aligned offset, but th\n[…]\nrites a chunk-based file whose xattr area is\nsized 4 (mod 8) and verifies the data round-trips; it fails before this\nchange and passes after.\n\nSigned-off-by: Edward McClanahan <emcclanahan@nvidia.com>",
"is_bot": false,
"headline": "Fix chunk-index map alignment for inodes with xattrs",
"author_name": "Edward McClanahan",
"author_login": "edmc-ss",
"committed_at": "2026-07-21T15:05:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "738bbf07b65117305f3bc7f9b3a7e23a90e5ed1c",
"body": "Access to underlying data may have multiple uses, from directly acessing\nfile data from a backing store, detecting sparse areas in a reader, and\nefficiently building with metadata only.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add data range interface to give access underlying data",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-07-03T07:02:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4862007cce1aab0824fb8af2534c8f6cbfb4f7c",
"body": "The four initFuzz* helpers build their shared fuzz image inside\nsync.Once.Do. When mkfs.erofs isn't on PATH, buildFuzzImage calls\nt.Skipf which triggers runtime.Goexit -- but Once still marks itself\ndone via its deferred atomic.StoreUint32. The first fuzz target gets\na clean Skip, but every later ta\n[…]\no any later caller skips cleanly with a\nuseful message rather than blowing up inside a seed run.\n\nAssisted-by: Claude Opus 4.7 <noreply@anthropic.com>\nSigned-off-by: Paul Meyer <katexochen0@gmail.com>",
"is_bot": false,
"headline": "Fix fuzz target panic when mkfs.erofs is missing",
"author_name": "Paul Meyer",
"author_login": "katexochen",
"committed_at": "2026-06-29T07:48:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e6b26a45bc56ff33fd8632b557cc797801cd225",
"body": "Prevent operations from returning success once the writer state is bad.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add sticky writer err when writer state has an error",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-05-22T01:57:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67ebed07722a72decf63682e2f33099ae80f714b",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add option to writer to set block size",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-05-22T01:57:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f92fb1ceae56e0ed2ae40ce490a00998a73e0d0e",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Fix improper handling of character devices",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-27T22:34:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64b1a72578a34960c8e38d7dd5cdc12695308656",
"body": "…ources\n\nWhen FileInfo.Sys() returns *Stat (e.g. from the EROFS reader), CopyFrom\nextracted metadata into a *builder.Entry but only used it for regular files\nand symlinks. Directories, device files, fifos, and sockets fell through\nto add(p, info) which called entryFromSys on the raw info — and\nentry\n[…]\nentry types when be was\nextracted, and removing the be==nil guard on the directory path so\ndirectories with *Stat metadata also get proper nlink handling.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Fix CopyFrom losing metadata for directories and devices from *Stat s…",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-27T22:34:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "982215f9f349aaec4be8aa56a927b11872e7ab99",
"body": "TestCopyFromStatSource verifies that directory xattrs and ownership\nare preserved when CopyFrom processes a source FS whose FileInfo.Sys()\nreturns *Stat (the EROFS reader path). This exercises the WalkDir\ngeneral path for non-regular, non-symlink entries.\n\nThis test fails before the fix in the following commit, which ensures\nthat metadata extracted from *Stat is wrapped in entryFileInfo for all\nentry types, not just regular files and symlinks.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add test for CopyFrom with *Stat source metadata preservation",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-27T22:34:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c3714c5af55ae68866980329107cdbc3e467506",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Increase timeout and reduce repeated compilation during fuzz tests",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-22T05:47:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a937724d98fa77cb20162ed16a2ec91dc998c405",
"body": "MinGW's struct stat uses signed 16-bit uid_t/gid_t which\ntruncates values >= 32768 when parsing tar headers. Store\nfull-width u32 values alongside struct stat and override\nafter inode creation on Windows.\n\nSigned-off-by: Craig Gumbley (Agent) <craiggumbley+agent@gmail.com>",
"is_bot": false,
"headline": "Fix mkfs.erofs uid/gid truncation on Windows",
"author_name": "Craig Gumbley (Agent)",
"author_login": "chelnak",
"committed_at": "2026-04-17T01:45:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9b71eba7c6c3fa1f76dcbf53c4f8abcfa235b1c",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Fix uig/gid bug on Windows",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-17T01:45:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ff2b230300b781aae4cd444ebfadce232a9a16a",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add unit tests for uid and gid values",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-17T01:45:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "649a1db8028b8ff4402a0081c3eab56b9af14b70",
"body": "loadBlock for FlatInline inodes computed blockEnd using blockOffset\nafter it was adjusted for the read position (pos), causing the returned\nblock slice to extend beyond the file's actual data.\n\nWhen pos > 0 (i.e. any Read call after the first on an inline file),\nblockEnd was inflated by pos bytes. T\n[…]\n the file offset never advanced past 0 within\nloadBlock.\n\nFix by computing blockEnd before adjusting blockOffset for pos.\n\nFound by FuzzWriterFileContent.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Fix FlatInline read returning wrong data for partial reads",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-16T02:25:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4a07e6fe7d5f05ff4424762526a511c7c7a82d2c",
"body": "Add 10 fuzz test targets that exercise the Writer through Create, Mkdir,\nSymlink, CopyFrom, and metadata APIs. Every test builds an image with\nerofs.Create, validates it with fsck.erofs, reads it back with Open,\nand verifies the contents match.\n\nFuzz targets:\n- FuzzWriterFileContent: file data of va\n[…]\nrCopyFrom: CopyFrom with fstest.MapFS sources\n- FuzzWriterImplicitDirs: deeply nested paths with implicit parents\n- FuzzWriterEmpty: directory-only images\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add fuzz tests for the writer",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-16T02:25:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57acaec4f0cc5e8a859ec15cf2ec97048e9dabb1",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "docs: update README with write API and usage examples",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-14T04:24:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab0bfcdf3c7704bbfaccbd040cac5599a774d892",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "erofs: add benchmark matrix for dir sources",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-14T04:24:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5d636e29152113fed791300b1dc3ec0dc25c2d5",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "erofs: add EROFS image builder and directory packing",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-14T04:24:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48e93041b94406a8323acc238923b3084dddc635",
"body": "Separate the internal inode type (used for I/O) from the returned\nfileInfo type (implements fs.FileInfo), allowing callers to extract\nUnix-style metadata via interface type assertions without importing\nthis package:\n\n if u, ok := fi.(interface{ UID() uint32 }); ok { ... }\n\nThe Stat struct is now \n[…]\nves the infoOnly flag and defers stat\nconstruction to callers that need it. Removing time.Time from the\ninode struct saves one allocation per inode parse.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Refactor FileInfo to use type-assertable accessor interfaces",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-12T21:49:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e5b8a154362a8182dbe3cfeb223283fd47a958e2",
"body": "Run each fuzz target for 10s on Linux to catch regressions in the\nparser's handling of corrupt or malicious inputs.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add fuzz step to CI workflow",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-09T05:08:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e07377dbb31c2fa4c39d6835e2930b9e8f9eefbc",
"body": "Add 32 fuzz tests covering path fuzzing across 4 directory structures\n(flat, nested/2-level, deep/10-level, wide/200-dir) and raw image\nbyte fuzzing (corrupt superblock, corrupt inode, full image mutation).\n\nPath fuzz tests exercise Open, ReadFile, Stat, ReadDir, WalkDir,\npartial ReadDir, read-after\n[…]\nttempts, and unicode.\n\nRaw image fuzz tests exercise the parser against malformed erofs\nimages to verify no panics, hangs, or unbounded allocations occur.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add fuzz tests for path operations and raw image parsing",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-09T05:08:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ea8cc742836e8d80e4c26bd1ceba141c4a3cc654",
"body": "Fix ReadDir(n) contract violation where it returned (nil, nil) instead\nof (nil, io.EOF) when n > 0 and the directory was exhausted, causing\ncallers using ReadDir(1) to loop forever.\n\nFix ReadDir slice out-of-bounds panic on corrupt dirent NameOff values\nby adding bounds checks against the block buff\n[…]\nock,\ncausing the value-reading loop to spin with remaining > 0 but\ncopySize == 0. Add post-reload size validation at all reload sites\nin the xattr parser.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Fix corrupt image handling and ReadDir contract",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-09T05:08:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "33947503a9ac2775c200a6751f06ebb036ad033e",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Fix panic closing file which is never read",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-08T04:21:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c31461815e48031e4536d6a34d7518501501d119",
"body": "When resolving paths, previously an entire directory would be scanned\nthen iterated though. With this change it is able to directly do the\nlookup while reading from the blocks. It peforms binary search within a\nblock for the common case and falls back to full scan when not found.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Optimize directory lookup",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-08T04:21:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38dd67da86cb5a123aba3f08c493692da143bfd6",
"body": "Ensure that errors return a typed error which can be checked with\n`errors.Is` when possible and always wrapped in PathError.\n\nFor readlink, the correct response for the named file not being a\nsymbolic link is to return invalid.\nhttps://man7.org/linux/man-pages/man2/readlink.2.html\n\nNote that Go's fs package currently does not define an equivalent of\n\"ENOTDIR\" and this library avoids using syscall definitions.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Cleanup read errors to use typed error",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-04-07T03:41:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e84df8fa49f2bb86b6ebbaef20fc3f4c213229dc",
"body": "Rename the primary API entry point from EroFS() to Open() for a cleaner,\nmore idiomatic Go API. Rename Opt to OpenOpt to distinguish reader\noptions from the upcoming Create() writer options.\n\nThe old names are preserved as deprecated type aliases and wrapper\nfunctions for backwards compatibility, to be removed in 0.3.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Rename EroFS to Open and Opt to OpenOpt",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-23T16:18:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62af2e29cd07bcbc1599584cf709b57081b332a4",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add sparse file and file size tests",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-20T22:19:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e6efc26b139f9d6b7d1be59aa7c946942a6b417",
"body": "Move tar building, test cases, and verification helpers into\ninternal/erofstest. Add reusable Basic and LongXattrs test cases\nwith Converter interface for pluggable erofs image creation.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Refactor test infrastructure into erofstest package",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-20T22:19:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42aa9acd5c2402c48fddbe0bdf087240b686d10e",
"body": "Signed-off-by: Gitjay11 <newajay.11r@gmail.com>",
"is_bot": false,
"headline": "feat: complete device table support & block addressing mapping (#17)",
"author_name": "Gitjay11",
"author_login": "Gitjay11",
"committed_at": "2026-03-20T18:54:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a257081b1a2ee245ae6b73e07b37196bd0add44e",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Trim v prefix from erofs-utils check",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-13T08:24:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47097c319546a0c1529b764344f6fe5a8f8874b8",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add erofs build on Windows",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-13T08:24:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f2a9a4e0a5316da8566e8019e15b2b863654c30",
"body": "Compressed filesystems are not part of the core format and are currently\nunimplemented.\n\nLet's explicitly return an \"unimplemented\" error for filesystems\nincluding compressed data, allowing users to fall back to other methods.\n\nSigned-off-by: Gao Xiang <hsiangkao@linux.alibaba.com>",
"is_bot": false,
"headline": "Strictly error out on compressed filesystems for now",
"author_name": "Gao Xiang",
"author_login": "hsiangkao",
"committed_at": "2026-03-13T02:53:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb85149f48348fb114d9405b4042025b91a37338",
"body": "Implement missing fs.FS functions.\nUpdate Open to properly handle symlink following.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Implement remaining fs.FS functions",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-13T02:50:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "234dfec08d77a2b35fa07483a0ec2c0610b600c7",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add Github Actions to lint and test",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-11T06:18:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c7c5c0d858c90e01c6e124d81a32a9469f17a8b",
"body": "Fix linter issues\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add golangci",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-11T06:18:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "959a363466b69b49758777b85add9d041c1ea4e9",
"body": "There is a relevant fix available in mkfs 1.9, skip older version to\nprevent test failure.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add back long prefix check with mkfs version check",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-11T06:11:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cdf2a8f48de99cff3be714a7f5427bffe5293c1",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add support for extra devices and chunk indexes",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-11T04:03:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "956c8facbbcf7db817e3157c0136371228085157",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Update tests to work on macOS",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-03-10T02:12:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c58b5853004eb3b8bdd327d3d80b8d2300b0b23d",
"body": "This change switches from committed binary test data to generating a tar\nfile on demand and then converting the tar file to an erofs file using\nmkfs.erofs.\n\nSigned-off-by: Kern Walster <kern.walster@gmail.com>",
"is_bot": false,
"headline": "Generate test data from tar file",
"author_name": "Kern Walster",
"author_login": "Kern--",
"committed_at": "2026-03-10T02:12:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a05c5cb1ea64b66eb17586188a9b291d24c8bd4d",
"body": "file.Read would always read from the start of the erofs data block\nregardless of the offset in the file. This was hidden because all of\nthe tests use repeated data that aligns to 512-bytes (the default buffer\nsize for io.ReadAll).\n\nThe solution is to make image.loadBlock correctly handle the positio\n[…]\nom the erofs perspective, we read partial blocks\ninto a slice for the fully block, but callers only see the valid data starting at blk.Bytse()[0].\n\nSigned-off-by: Kern Walster <kern.walster@gmail.com>",
"is_bot": false,
"headline": "Fix read out of bounds + incorrect data",
"author_name": "Kern Walster",
"author_login": "Kern--",
"committed_at": "2026-03-06T01:28:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1dabaf6602ad6b91d9e1414b853dd4a45a8d3614",
"body": " - If 2-byte length is 0, it should equal to 65536;\n\n - Support long xattr prefixes stored in the filesystem directly.\n\nFixes: 237e4b380d2f (\"Add support for long xattr prefixes\")\nSigned-off-by: Gao Xiang <hsiangkao@linux.alibaba.com>",
"is_bot": false,
"headline": "Fix support for long xattr prefixes",
"author_name": "Gao Xiang",
"author_login": "hsiangkao",
"committed_at": "2026-03-05T00:21:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de74200296a22c17228c7d3bc7396710814132d2",
"body": "Signed-off-by: Gao Xiang <hsiangkao@linux.alibaba.com>",
"is_bot": false,
"headline": "Improve on-disk inode core parsing",
"author_name": "Gao Xiang",
"author_login": "hsiangkao",
"committed_at": "2026-02-26T02:12:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47aaa3f63c4f81144734e3c35e7842bb37b7b7b6",
"body": " blkOffset() => metaStartPos()\n inode => nid\n : since inode numbers could be encoded according to runtime\n environments.\n dataOffset => flatDataOffset()\n : since it only applies to flat core ondisk layouts.\n isize => icsize\n : isize is ambiguous: 32 or 64 bytes are actually inode core sizes.\n\nSigned-off-by: Gao Xiang <hsiangkao@linux.alibaba.com>",
"is_bot": false,
"headline": "Clarify some EROFS-specific names & definition",
"author_name": "Gao Xiang",
"author_login": "hsiangkao",
"committed_at": "2026-02-26T02:12:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "237e4b380d2f33526340f468903d5e2bf1c8a6c4",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add support for long xattr prefixes",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-02-09T06:13:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a54422d89bdb2ea52e64e87dc8128bb55c5a3df",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add more documentation to disk format",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-02-09T06:13:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4784a2f1c56ee82d604f6a1adaac2d2a6b4afe2",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add test for long prefix",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2026-02-09T06:13:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9629ce7d5f1fb0f3109c8d12a54c648dddec9068",
"body": null,
"is_bot": false,
"headline": "fix: InodeCompact struct had invalid size",
"author_name": "Patryk Sondej",
"author_login": "patryk4815",
"committed_at": "2025-12-18T02:28:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e84d089fc453ca278eed94470f42e589d8d21e9a",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Update Readme to include xattr implementation",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-07-26T21:08:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b14d522b62c7beac5c6b5a5906e0e10745f9cb9c",
"body": "Properly set the filemode and rdev\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Update erofs stat to show filemode",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-07-21T06:27:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34ee96c0089a9be24315dc5ad6152739e3d5c463",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add shared xattr support",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-07-20T00:38:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d7dafbd9f00a46117ea584481369c23faf29c75",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Print xattrs in erofs cli",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-07-16T06:41:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d55a5f409ab1284e32768a311ea0a7431a515c33",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Update tests to include xattrs",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-07-16T06:41:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a93ebe0b73a5bfa34a0aad3f16ce811d320174cb",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add basic support for xattrs",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-07-16T06:41:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b08b02f2fb848db30c3244d9e4f29b15ec93782c",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add option to avoid caching when only getting info",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-07-12T23:11:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba55f2868ee21db8bc42a8ed1072011abc85150d",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Fix block caching when full block is not loaded",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-07-12T22:53:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0123f160f822684b63c6bd505aef35dc54fd0533",
"body": "An extended inode may consume the last 32 bytes of one block and the\nnext 32 bytes of another. The inodes can be loaded independently of\nwhere they land on the datablock. This issue is fixed by directly using\nthe bytes buffer rather than loading inodes into its position in the\nblock buffer.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Fix improper handling of extended inode which spans blocks",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-07-12T21:29:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adcc1f9c5c8276038eb81f422f06b9df975a1a31",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Improve error handling for walk tool",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-07-12T21:27:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef8015f84e1725eefa00ad2a05d8e3675416126d",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Rename module to github.com/erofs/go-erofs",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-05-22T01:04:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c3ce620b942ef6992c1bc13028e7ba41e07c59d",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Update readme to reflect status",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-05T08:39:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d16bd573878c2ed4be1268caa38a2f0ec92866b0",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add chunk layout tests",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-05T08:26:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02acb5919427f30630fafc03104ac745840cf0cd",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add support for chunk layout",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-05T08:26:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d94a4da5830c61d4a6cf0b8b900a6248b6f9394b",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Rename maxSize to end in block struct",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-04T15:31:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a703a6c4ad3ee9ba6d22b85d79c84ec8f689035",
"body": "Make the offset clearer and use fewer variables\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Cleanup loadBlock logic further",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-04T15:29:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "191937b8ca25e000950ee1a828f1decf705b08ac",
"body": "The RawBlockAddr is interpreted differently depending on the\nlayout and file type. Generalize the field as inode data.\n\nSigned-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Rename RawBlockAddr to InodeData",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-04T08:18:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ab1f016ac7cc6b994cd1ff62817ee2d1d48fadf",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Cleanup inline block offset logic",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-04T08:17:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf28313d4cfb20a70ddfa1b6faec310d625e267b",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add example to README",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-03T15:30:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1211990486eb7b4c123c95ae6b1a1596fad6318a",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add LICENSE and README",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-03T15:23:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46f5b0a672be7af211f59953a6563ac7ba7fe796",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Update erofs test runner to support more cases",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-03T14:47:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9e62581c5e918d874bc98a0a76dc6bbbd1b7748",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add basic erofs test",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-03T14:34:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1e0343f7d976c47def9bb3eab42d41b283bd4f2",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Fix block read positions",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-02T16:49:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "756c86922533132140957ece8ada894b2ea1dbcb",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Implement read",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-01T14:24:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43a6443b6a5290d438da7a9f3a1c683bd371ff82",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Fix directory walking name and incorrect condition",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-01T13:23:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e5a89cc01151e54c814a63e9210a56705086b58",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add block loading and cleanup readdir logic to use block load",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-02-01T06:36:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7707051a95535c673a6e67c0762446d761cef4c",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Simplify base file type",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-01-30T14:57:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5013b32a5ee1de5678bb562a40c2ff63c20e52d0",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add simple cli which dumps filesystem tree",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-01-30T09:12:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "021731ac89adf70a1d13f2a2ae7c685606346edd",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Add initial implementation with basic directory functionality",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-01-30T09:12:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30654c9f63d340b30cfbbc8288d46b140f2db9e6",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Create new module",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2025-01-30T09:11:57Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 5,
"commits_last_year": 46,
"latest_release_at": "2026-07-21T00:31:48Z",
"latest_release_tag": "v0.3.1",
"releases_from_tags": false,
"days_since_last_push": 9,
"active_weeks_last_year": 16,
"days_since_latest_release": 10,
"mean_days_between_releases": 32.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/erofs/go-erofs",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/erofs/go-erofs",
"is_deprecated": false,
"latest_version": "v0.3.1",
"repository_url": "https://github.com/erofs/go-erofs",
"versions_count": 5,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-03T07:02:08Z",
"latest_version_yanked": null,
"days_since_latest_publish": 27
}
]
},
"popularity": {
"forks": 19,
"stars": 25,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2025-06-21",
"count": 1
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-08-04",
"count": 1
},
{
"date": "2025-08-28",
"count": 1
},
{
"date": "2025-10-21",
"count": 1
},
{
"date": "2025-10-30",
"count": 1
},
{
"date": "2026-01-20",
"count": 1
},
{
"date": "2026-01-27",
"count": 1
},
{
"date": "2026-03-05",
"count": 1
},
{
"date": "2026-03-15",
"count": 1
},
{
"date": "2026-03-29",
"count": 1
},
{
"date": "2026-04-16",
"count": 1
},
{
"date": "2026-04-24",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-05-30",
"count": 1
},
{
"date": "2026-06-02",
"count": 1
},
{
"date": "2026-06-03",
"count": 1
},
{
"date": "2026-07-25",
"count": 1
}
],
"complete": true,
"collected": 19,
"total_forks": 19
},
"star_history": null,
"open_issues_and_prs": 5
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 58871,
"source_files_sampled": 37,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 4,
"merged_prs": 28,
"open_issues": 1,
"closed_ratio": 0.833,
"closed_issues": 5,
"closed_unmerged_prs": 2
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "dmcgowan",
"commits": 65,
"avatar_url": "https://avatars.githubusercontent.com/u/169601?v=4"
},
{
"type": "User",
"login": "hsiangkao",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/36559268?v=4"
},
{
"type": "User",
"login": "Kern--",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/2304727?v=4"
},
{
"type": "User",
"login": "chelnak",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/3777574?v=4"
},
{
"type": "User",
"login": "edmc-ss",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/11822649?v=4"
},
{
"type": "User",
"login": "Gitjay11",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/233622891?v=4"
},
{
"type": "User",
"login": "patryk4815",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/3074260?v=4"
},
{
"type": "User",
"login": "katexochen",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/49727155?v=4"
}
],
"contributors_sampled": 8,
"top_contributor_share": 0.855
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": false,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 9,
"reason": "16 out of 17 merged PRs checked by a CI test -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "622ddde0629e32e07b119b308e59b419fcb76bd9",
"ran_at": "2026-07-31T03:56:46Z",
"aggregate_score": 6.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-26T00:05:18Z",
"oldest_open_prs": [
{
"number": 34,
"created_at": "2026-05-30T20:16:12Z",
"last_comment_at": "2026-05-31T13:54:31Z",
"last_comment_author": "hsiangkao"
},
{
"number": 36,
"created_at": "2026-06-01T11:41:35Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 39,
"created_at": "2026-07-03T07:01:12Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 40,
"created_at": "2026-07-24T07:26:35Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-21T15:05:46Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 33,
"created_at": "2026-05-28T14:39:54Z",
"last_comment_at": "2026-05-28T23:39:19Z",
"last_comment_author": "hsiangkao"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/erofs/go-erofs",
"host": "github.com",
"name": "go-erofs",
"owner": "erofs"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 64 is calibrated to 73 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 64,
"calibrated": 73,
"calibration": "2026-08-02"
}
}
],
"value": 73,
"inputs": {
"security": 68,
"vitality": 76,
"community": 43,
"governance": 68,
"calibration": "2026-08-02",
"engineering": 61,
"ai_readiness": 58,
"weighted_overall_raw": 64
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 76,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"commits_last_year": 46,
"human_commit_share": 1,
"days_since_last_push": 9,
"active_weeks_last_year": 16
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 9 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "16/52 weeks with commits",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 16
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "46 commits in the last year",
"points": 15,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 46
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 5,
"latest_release_tag": "v0.3.1",
"releases_from_tags": false,
"days_since_latest_release": 10,
"mean_days_between_releases": 32.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "5 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 5
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 10 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~32.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 32.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 14,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 14 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 14
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 43,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"forks": 19,
"stars": 25,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "25 stars",
"points": 22.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 25
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "19 forks",
"points": 10.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 19
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 68,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 8,
"top_contributor_share": 0.855
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 86% of commits",
"points": 3.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 86
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "8 contributors",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 8
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 90,
"inputs": {
"merged_prs": 28,
"open_issues": 1,
"closed_issues": 5,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.833,
"closed_unmerged_prs": 2,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "83% of issues closed",
"points": 35,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 83
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "28/30 decided PRs merged",
"points": 28,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 28,
"decided": 30
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"followers": 63,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "erofs",
"public_repos": 19,
"account_age_days": 2916
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "63 followers of erofs",
"points": 13,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 63,
"login": "erofs"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "19 public repos, account ~7 yr old",
"points": 21.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 19
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/erofs/go-erofs"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 27
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 27 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 27
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "5 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 5
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "16 out of 17 merged PRs checked by a CI test -- score normalized to 9",
"points": 18,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 68,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 6.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "16 out of 17 merged PRs checked by a CI test -- score normalized to 9",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "5 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 23,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.434,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "33 of 76 human commits state their intent (structured subject or explanatory body)",
"points": 23.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 33,
"sampled": 76
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.013,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 76 commits agent-authored or agent-credited",
"points": 2.6,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 76
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 58871,
"source_files_sampled": 37,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/37 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 37,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [],
"scores": {
"library": 3
},
"primary": null,
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 3
}
],
"artifacts": [],
"confidence": "none",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": false
},
"metrics_version": "2.3.2"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-31T03:57:03.532053Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/erofs/go-erofs.svg",
"full_name": "erofs/go-erofs",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with erofs/go-erofs. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.2, schema v0.27.0 — full methodology · metrics wiki.
