Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-24 20:59 UTC
fbk-most / fast-traffic-simulator
A Fast Traffic Simulator
fbk-most/fast-traffic-simulator holds a health index of 48 out of 100, placing it in the At risk band. It scores highest on Vitality (72/100) and lowest on Community & Adoption (24/100). It was last updated 8 days ago. A single contributor accounts for most of its recent work.
48
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
48
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
MoST @ FBKOrganization
7 followers7 public repossince Jan 2025
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| PyPI | fast-traffic-simulator | 0.2.0 | - | 3 | 8 days ago | numpyscipysimulationtraffictransport |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
72
Development activity
59Moderate
How it's scored
| 28.8/36 | Push recency — last push 8 days ago |
| 5.5/36 | Commit cadence — 8/52 weeks with commits |
| 14.5/18 | Commit volume — 40 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 40 |
| human_commit_share | 1 |
| days_since_last_push | 8 |
| active_weeks_last_year | 8 |
Release discipline
92Excellent
How it's scored
| 27/27 | Ships releases — 3 releases published |
| 36/36 | Release recency — latest release 8 days ago |
| 19.8/27 | Release cadence — a release every ~67 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 3 |
| latest_release_tag | v0.2.0 |
| releases_from_tags | no |
| days_since_latest_release | 8 |
| mean_days_between_releases | 67 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
24
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 1 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 1 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
52
Maintainer resilience (bus factor)
13Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 38.2/38.3 | PR acceptance — 1/1 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/21 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 1 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship
46At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 6.5/25 | Owner reach — 7 followers of fbk-most |
| 9.6/25 | Track record — 7 public repos, account ~1 yr old |
Inputs used
| followers | 7 |
| owner_type | Organization |
| is_verified | — |
| owner_login | fbk-most |
| public_repos | 7 |
| account_age_days | 549 |
Package maintenance
92Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on pypi |
| 35/35 | Publish recency — latest publish 8 days ago |
| 12/20 | Version history — 3 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | fast-traffic-simulator |
| ecosystems | pypi |
| any_deprecated | no |
| min_days_since_publish | 8 |
Engineering Quality
Are baseline engineering and documentation practices in place?
30
Engineering practices
24Critical
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 0/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
Inputs used
| has_ci | yes |
| has_tests | no |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
40At risk
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
60
Security posture
50Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/21 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4.9 |
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 6 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:fast-traffic-simulator@0.2.0 runtime dependency closure — what installing the published package pulls in — 6 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
30
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 40 of 40 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
10Critical
How it's scored
| 0/18 | One-command bootstrap |
| 0/22 | Automated tests |
| 0/11 | Lint / format config |
| 0/11 | Static type checking |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 40 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | no |
| lockfiles | uv.lock |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
55Moderate
How it's scored
| 0/45 | Type-checkable code — Python without a type-check config |
| 55/55 | Manageable file sizes — 0/5 source files over 60KB |
Inputs used
| primary_language | Python |
| largest_source_bytes | 39,680 |
| source_files_sampled | 5 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
1GitHub stars
1contributors
40commits, last 12 months
8days since last push
3releases
1bus factor
0open issues
PyPIpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 4.9 / 10
4.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 0 | CI-Tests | 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/21 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 4
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| PyPI | numpy | >=1.24 | pyproject.toml |
| PyPI | scipy | >=1.10 | pyproject.toml |
| PyPI | pandas | >=2.0 | pyproject.toml |
| PyPI | pyarrow | >=14.0 | pyproject.toml |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing pypi:fast-traffic-simulator@0.2.0 pulls in 6 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 13212,
"has_wiki": false,
"homepage": null,
"languages": {
"Python": 39845
},
"pushed_at": "2026-07-16T16:53:55Z",
"created_at": "2025-09-02T10:15:10Z",
"owner_type": "Organization",
"updated_at": "2026-07-16T16:53:49Z",
"description": "A Fast Traffic Simulator",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": "https://most.fbk.eu/",
"name": "MoST @ FBK",
"type": "Organization",
"login": "fbk-most",
"company": null,
"location": "Italy",
"followers": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/195871544?v=4",
"created_at": "2025-01-21T07:58:24Z",
"is_verified": null,
"public_repos": 7,
"account_age_days": 549
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-16T16:55:18Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-04-20T07:00:14Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-03-04T18:31:57Z"
}
],
"recent_commits": [
{
"oid": "7b0433c044086cc10d6199434fe329a54098bf3f",
"body": null,
"is_bot": false,
"headline": "release: v0.2.0",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-16T16:53:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3622857483c89fd1aeada6a8ce1c843a5bf41257",
"body": null,
"is_bot": false,
"headline": "fix: correct date in CHANGELOG",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-16T16:46:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16fedfca273b3e9c89b4fa3e8c76817e8bc43aae",
"body": null,
"is_bot": false,
"headline": "chore: update version in CHANGELOG",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-16T16:41:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f75d444c89e3568346404bc27aa3ab483b1d688c",
"body": null,
"is_bot": false,
"headline": "chore: update CHANGELOG, add gitignore and uv.lock",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-16T16:21:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b41a486bd26183138532b41e66a218de9f400636",
"body": "…active-vehicle tracking, parallel SP refresh) (#1)\n\n## Summary\n\nOptimizes the simulator end-to-end; on a full-scale test (2,480 nodes, \n4,526 edges, 535k vehicles, ~90,000 steps), the performance gain is 10x. \n\nEvery change was verified to be bit-identical against the previous step\n(full per-vehicl\n[…]\n GIL,\n so threads don't help; 6 workers ≈ 4x). Identical by construction.\n- **Example script**: header-ful CSV support, vectorized loading and\n trip logging, new `--seed`, `--arrivals`, `--workers`.",
"is_bot": false,
"headline": "perf: 10x faster simulation with identical behavior (sparse routing, …",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-16T10:30:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c9421ba74e031fbd517515b0844445e78e1c1f3",
"body": "Simulator.build() gains refresh_interval (step() triggers the\nhorizon-limited recomputation itself on a fixed cadence) and\nrefresh_workers (recomputations are chunked over a persistent process\npool; scipy's Dijkstra holds the GIL, so threads don't help). Each\ndestination's shortest-path tree is independent, so results are\nbit-identical. simulate.py gains --workers and uses the automated mode.",
"is_bot": false,
"headline": "perf: automated shortest-path refresh with parallel Dijkstra workers",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-16T04:43:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5dabb150eed3a7c9e5ce0200faaa6c22277d79b",
"body": "Extract _shortest_paths_to(), shared by build() and the periodic\nrefresh (build stays unbounded: the reachability check reads a row for\nevery vehicle). Track the validity deadline promised by horizon-limited\nrefreshes and raise RuntimeError if routing is read past it.\nBehavior is bit-identical for compliant callers.",
"is_bot": false,
"headline": "refactor: unify Dijkstra call sites, guard against stale routing reads",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-15T10:49:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ae78044a174293fafeeb6bcc2b5c29da089148c",
"body": "next refresh\n\nstep() gains an optional horizon parameter: when set, update_next_leg\nrecomputes Dijkstra only from destinations of vehicles currently in the\nnetwork or departing within horizon steps. Other rows are recomputed\nagain before any vehicle reads them, so results are identical provided\nthe \n[…]\nedules refreshes on the absolute step counter (previously the\nschedule restarted each hour, stretching the gap when SP does not\ndivide 3600) and passes horizon=SP. Significant performance improvement.",
"is_bot": false,
"headline": "perf: restrict shortest-path refresh to routing rows readable before",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-15T09:54:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e76b3c7aba03fd8197bd0e756f4431797adee77",
"body": "Passing Python ints as searchsorted values promoted (and copied) the\nint32 sorted start-times array to int64 on every step. Search with a\nmatching-dtype array instead, to improve performance. Behavior is\nbit-identical.",
"is_bot": false,
"headline": "perf: avoid full-array dtype promotion in do_starting searchsorted",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-15T05:52:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "694bf7b305d24c928fdb2c22b84eb2f67c2ef757",
"body": "Maintain a sorted index array of the vehicles currently in the network\n(inserted at start via bisection on a start-time-ordered index, removed\non arrival). All step phases gather over this set instead of scanning\nevery vehicle; vehicle status is stored as int8, and lane_front_vehicle\nis reset on arrival. Behavior is bit-identical. Experiments show\nsignificant performance gain in large scale scenarios.",
"is_bot": false,
"headline": "perf: track active vehicles; per-step cost scales with in-flight fleet",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-15T04:20:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a0e973e8cde6354d6233592547d9606e5c7cb49",
"body": "do_entering_edge decides all admissions in one vectorized pass against\nthe lane state at the start of the phase: per-edge candidates are ranked\nby priority (vehicle index order, or one random permutation for random\nmode) and assigned to the lanes with a gap of at least DELTA in\ndecreasing-gap order,\n[…]\nd same-step reuse (unintended). Experiments confirm\nimpact to congested short edges (marginally longer travel time).\nRandom-mode seeds produce different (but still reproducible) outcomes\nthan before.",
"is_bot": false,
"headline": "perf!: single-pass vectorized edge admission with snapshot semantics",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-14T20:56:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eb1b0ff828ecd3aa0b85274689a0e3481736e789",
"body": "destinations\n\nReplace the dense nodes x nodes edge map with a sorted-key searchsorted\nlookup, pass the graph to Dijkstra as csr_array without densifying, and\ncompute predecessors only from the unique vehicle destinations. Routing\nmemory drops from O(nodes^2) to O(edges + destinations x nodes);\nbehavior is bit-identical.",
"is_bot": false,
"headline": "perf: sparse routing structures, Dijkstra restricted to vehicle",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-14T16:08:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6690bbb53906115b9300481168a48de3ad3b98d3",
"body": null,
"is_bot": false,
"headline": "perf: vectorize simulate.py I/O and logging, accept header-ful CSVs",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-14T10:08:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fd573f88c6e45263ff692776816ecf499d9e386",
"body": null,
"is_bot": false,
"headline": "feat: add seed parameter for reproducible random simulations",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-07-14T10:07:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "facfbb82cdee93007d755fe8dfe7bdb30fd2315a",
"body": null,
"is_bot": false,
"headline": "release: v0.1.1",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-04-20T06:49:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a3bc331413ef00c951ea1a5aa528dc631ded3b8",
"body": null,
"is_bot": false,
"headline": "ci: add PyPI publish workflow",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-04-20T06:32:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f015f8fcb38406800910ed9d724aa03fc8fd5ec2",
"body": null,
"is_bot": false,
"headline": "fix: use correct repo name in URLs",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-04-20T06:19:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "455afd30e99cc15f12e9ca583610ecf99687e25e",
"body": null,
"is_bot": false,
"headline": "fix: fixed files to include in pypi source",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-03-04T18:27:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31bc7b1cc80e55506fced1942a3cb8353e1d611e",
"body": "Package structure:\n- Replace loose fts.py with fts/ Python package (installable\n as fast-traffic-simulator via pip/uv)\n- fts/simulator.py: core Simulator class with docstrings,\n expanded module docstring describing network/routing/vehicle/node/lane\n models, np.bool -> np.bool_, typo fix (entered_\n[…]\nmples/quickstart.py: minimal in-memory example (also in README)\n\nOther:\n- pyproject.toml: minimal but complete file\n- README.md: installation, quickstart, model description, updated\n acknowledgements",
"is_bot": false,
"headline": "feat: restructure project as installable fts package v0.1.0",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2026-02-27T06:07:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62dcfe09470101eba3e72aa2697e322750f34eb7",
"body": null,
"is_bot": false,
"headline": "feat: added verbose messages of vehicles with origin=destination",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-10-20T16:43:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bf0a3cde92538dfe788aa25e9c3a3505b034d24",
"body": null,
"is_bot": false,
"headline": "chore: updated fine names",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-10-20T16:43:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b079663cfa9c81360c53bf99368c463e44b41e4d",
"body": "- verbose log of duplicated edges and vehicles with unreachable destination",
"is_bot": false,
"headline": "feat: verbose log",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-09-09T13:31:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56944d4a8154ba12d593a07f69d278b83d695889",
"body": "- added basic project documentation",
"is_bot": false,
"headline": "feat: documentation",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-09-02T10:03:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9097bc7eb23d17626f6f6e2d6ac5815ac6040487",
"body": "- fixed bug with -2 lanes\n- refactoring (main moved test.py)",
"is_bot": false,
"headline": "feat: car following algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-09-02T09:57:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cf70a9c393d889ee0f592bb82d06322ebcd47f7",
"body": "- revised the entering edge loop (still to be further improved)",
"is_bot": false,
"headline": "feat: car following algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-09-01T12:52:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19077b65f0cc321dee9314b9bd6eec89bf7edae4",
"body": "- removed next_lane",
"is_bot": false,
"headline": "feat: car following algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-09-01T12:00:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07fc0226c1540b06d67eb1456203bd5f415381b7",
"body": "- cleanup",
"is_bot": false,
"headline": "feat: car following algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-09-01T05:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cff711438c77c446e2fe9e553bafc5d1e09edb8",
"body": "- added multi lane management",
"is_bot": false,
"headline": "feat: car following algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-31T18:13:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc9a768ba60ddd439b58f5f04efe021d8ef78a75",
"body": "- added nondeterminism in car selection in entering_edge\n- code cleanup",
"is_bot": false,
"headline": "feat: car following algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-21T09:38:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6942f8ee7a0885bb2d9a6685fa64935da3ffa6ce",
"body": "- parallelized also the entering_edge phase\n- does not manage multiple lanes",
"is_bot": false,
"headline": "feat: car following algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-21T06:39:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "704d4573b43dca01c4844a92924f8a86e3d1c272",
"body": "First version:\n- partially parallelized (work to do on for the entering_edge phase)\n- does not manage multiple lanes",
"is_bot": false,
"headline": "feat: car following algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-20T15:01:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "852a632b36ae5c4a094adcf94a32ec73aa08d581",
"body": "First version:\n- very inefficient\n- does not manage multiple lanes",
"is_bot": false,
"headline": "feat: car following algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-19T18:19:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad2f3f82b2ae7693c40b487abb76e1136b0e3afc",
"body": "The simulation status has been refactored to include vehicles and edges.\n\nSkipped useless computation in simulation step.",
"is_bot": false,
"headline": "feat: added capacity and occupancy trace",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-17T17:30:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af08ac32e7cfc9a4d8790e378c6a216172621392",
"body": "Skipped useless computation in simulation step.",
"is_bot": false,
"headline": "feat: performance improvement",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-14T12:46:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75e2c3dc845f2492b4f971608a506b44253878b5",
"body": "Replaced structured array for vehicle status with individual arrays.",
"is_bot": false,
"headline": "feat: performance improvement",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-14T09:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81534f6bb4d407df0ef82a1d8fe0ec2664c749b9",
"body": "The simulator now works only on normalized representation of nodes / edges / vehicles.",
"is_bot": false,
"headline": "feat: performance improvement",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-14T08:09:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa6c7fc6c6873b98c35d06e553327880acfd6c32",
"body": null,
"is_bot": false,
"headline": "feat: basic simulator (with free floating time for edge traversal).",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-13T15:27:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d877388c336d1f473aeded7be8495ec66beaaa5",
"body": null,
"is_bot": false,
"headline": "feat: improved routing algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-11T17:25:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed4e7327b17ab3570e7ee06982458cee80cafd88",
"body": null,
"is_bot": false,
"headline": "feat: basic routing algorithm",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-11T09:01:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28d1726c63c4afb20bf9f59c660e3eea8452fab4",
"body": null,
"is_bot": false,
"headline": "feat: function to read files",
"author_name": "Marco Pistore",
"author_login": "pistore",
"committed_at": "2025-08-11T07:17:30Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 3,
"commits_last_year": 40,
"latest_release_at": "2026-07-16T16:55:18Z",
"latest_release_tag": "v0.2.0",
"releases_from_tags": false,
"days_since_last_push": 8,
"active_weeks_last_year": 8,
"days_since_latest_release": 8,
"mean_days_between_releases": 67
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "fast-traffic-simulator",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"numpy",
"scipy",
"simulation",
"traffic",
"transport",
"Development Status :: 3 - Alpha",
"Intended Audience :: Science/Research",
"License :: OSI Approved :: Apache Software License",
"Operating System :: OS Independent",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.12",
"Topic :: Scientific/Engineering",
"Topic :: Scientific/Engineering :: Artificial Intelligence"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/fast-traffic-simulator/",
"is_deprecated": false,
"latest_version": "0.2.0",
"repository_url": "https://github.com/fbk-most/fast-traffic-simulator",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2026-03-04T18:17:11.263838Z",
"latest_published_at": "2026-07-16T16:55:57.609654Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 0,
"stars": 1,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 39680,
"source_files_sampled": 5,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 6,
"malicious_count": 0,
"assessed_package": "pypi:fast-traffic-simulator@0.2.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "numpy",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.24"
},
{
"name": "scipy",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.10"
},
{
"name": "pandas",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.0"
},
{
"name": "pyarrow",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=14.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 1,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "pistore",
"commits": 40,
"avatar_url": "https://avatars.githubusercontent.com/u/4172147?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"publish.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/21 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "7b0433c044086cc10d6199434fe329a54098bf3f",
"ran_at": "2026-07-24T20:59:42Z",
"aggregate_score": 4.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-16T16:56:01Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-16T10:30:40Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/fbk-most/fast-traffic-simulator",
"host": "github.com",
"name": "fast-traffic-simulator",
"owner": "fbk-most"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"security": 60,
"vitality": 72,
"community": 24,
"governance": 52,
"engineering": 30
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 72,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 40,
"human_commit_share": 1,
"days_since_last_push": 8,
"active_weeks_last_year": 8
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 8 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "8/52 weeks with commits",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 8
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "40 commits in the last year",
"points": 14.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 40
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 3,
"latest_release_tag": "v0.2.0",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 67
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "3 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 3
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~67 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 67
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 8,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 8 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 8
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 1,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "1 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 1
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 52,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 1,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1/1 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1,
"decided": 1
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/21 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"followers": 7,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "fbk-most",
"public_repos": 7,
"account_age_days": 549
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "7 followers of fbk-most",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 7,
"login": "fbk-most"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "7 public repos, account ~1 yr old",
"points": 9.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 7
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"packages": [
"fast-traffic-simulator"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "3 published versions",
"points": 12,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 3
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 30,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "critical",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 60,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/21 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:fast-traffic-simulator@0.2.0 runtime dependency closure — what installing the published package pulls in — 6 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:fast-traffic-simulator@0.2.0",
"assessed": 6
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 6,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 6,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 30,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "40 of 40 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 40,
"sampled": 40
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [
"uv.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 40",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 40
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 39680,
"source_files_sampled": 5,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/5 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 5,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-24T20:59:51.409939Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/f/fbk-most/fast-traffic-simulator.svg",
"full_name": "fbk-most/fast-traffic-simulator",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — PyPI.