Public recordExcellent
Software health reportschema 0.27.0 · metrics 2.5.0 · 2026-07-29 04:59 UTC
getsentry / rust-proguard
A rust library for handling proguard mapping files
getsentry/rust-proguard holds a health index of 83 out of 100, placing it in the Excellent band. It scores highest on Sustainability & Governance (86/100) and lowest on Community & Adoption (57/100). It was last updated today. 3 contributors account for most of its recent work.
83
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
83
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 70 is calibrated to 83 on the published index scale (record calibration 2026-08-02).
Ownership
SentryOrganization
3,133 followers792 public repossince Feb 2012
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| crates.io | proguard | 5.10.4 | 83,681 | 33 | 0 days ago | androidproguardr8retrace |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
78
Development activity
63Moderate
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 9.7/36 | Commit cadence — 14/52 weeks with commits |
| 14.7/18 | Commit volume — 42 commits in the last year |
| 3/10 | OpenSSF Scorecard: Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
Inputs used
| commits_last_year | 42 |
| human_commit_share | 0.97 |
| days_since_last_push | 0 |
| active_weeks_last_year | 14 |
Release discipline
100Exceptional
How it's scored
| 27/27 | Ships releases — 26 releases published |
| 36/36 | Release recency — latest release 0 days ago |
| 27/27 | Release cadence — a release every ~41.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 26 |
| latest_release_tag | 5.10.4 |
| releases_from_tags | no |
| days_since_latest_release | 0 |
| mean_days_between_releases | 41.8 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
57
Popularity & adoption
39Weak
How it's scored
| 23.5/60 | Stars — 29 stars |
| 7/25 | Forks — 8 forks |
| 8.7/15 | Watchers — 37 watchers |
Inputs used
| forks | 8 |
| stars | 29 |
| watchers | 37 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
59Moderate
How it's scored
| 22.5/22.5 | README |
| 16.9/22.5 | License — license file present, not a recognized license |
| 0/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| readme_badges | — |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | yes |
| readme_badge_services | — |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
82Excellent
How it's scored
| 65.6/80 | Monthly downloads — 83,681 downloads/month across crates |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | proguard |
| dependents | — |
| ecosystems | crates |
| total_downloads | 4,372,298 |
| monthly_downloads | 83,681 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
86
How it's scored
| 36/54 | Bus factor — 3 contributor(s) cover half of all commits |
| 16.3/22.5 | Commit distribution — top contributor authored 28% of commits |
| 13.5/13.5 | Contributor breadth — 20 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 17 contributing companies or organizations |
Inputs used
| bus_factor | 3 |
| contributors_sampled | 20 |
| top_contributor_share | 0.277 |
Issue & PR responsiveness
91Excellent
How it's scored
| 42/42 | Issue resolution — 100% of issues closed |
| 28.3/30 | PR acceptance — 81/86 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 9/15 | OpenSSF Scorecard: Code-Review — Found 18/30 approved changesets -- score normalized to 6 |
Inputs used
| merged_prs | 81 |
| open_issues | 0 |
| closed_issues | 9 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 5 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
80Excellent
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 25/25 | Owner reach — 3,133 followers of getsentry |
| 25/25 | Track record — 792 public repos, account ~14 yr old |
Inputs used
| followers | 3,133 |
| owner_type | Organization |
| is_verified | — |
| owner_login | getsentry |
| public_repos | 792 |
| account_age_days | 5,291 |
Package maintenance
100Exceptional
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on crates |
| 35/35 | Publish recency — latest publish 0 days ago |
| 20/20 | Version history — 33 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | proguard |
| ecosystems | crates |
| any_deprecated | no |
| min_days_since_publish | 0 |
Engineering Quality
Are baseline engineering and documentation practices in place?
61
Engineering practices
68Good
How it's scored
| 24/24 | CI workflows — 5 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 18 out of 18 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 10/10 | Topics — 1 topics |
| 0/10 | Wiki |
Inputs used
| topics | tag-production |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
65
Security posture
56Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 3.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 18 out of 18 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 4.5/7.5 | Code-Review — Found 18/30 approved changesets -- score normalized to 6 |
| 2.5/2.5 | Contributors — project has 17 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | License — license file detected |
| 2.2/7.5 | Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| 0/5 | Packaging — no data |
| 5/5 | Pinned-Dependencies — all dependencies are pinned |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 5.6 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
100Exceptional
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 69 |
| unassessed_packages | 0 |
| affected_by_severity | unknown 1 |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 69 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
66
Agent context & guidance
31At Risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 30.8/40 | Legible commit history — 56 of 97 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.577 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
81Excellent
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Rust (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 6 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 10/10 | OpenSSF Scorecard: Pinned-Dependencies — all dependencies are pinned |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | Cargo.lock |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.06 |
| toolchain_manifests | Cargo.toml |
| dependency_bot_commit_share | 0 |
Code legibility for models
98Exceptional
How it's scored
| 45/45 | Type-checkable code — Rust (statically typed) |
| 53/55 | Manageable file sizes — 1/27 source files over 60KB |
Inputs used
| primary_language | Rust |
| largest_source_bytes | 60,416 |
| source_files_sampled | 27 |
| oversized_source_files | 1 |
Key facts
29GitHub stars
20contributors
42commits, last 12 months
0days since last push
26releases
3bus factor
0open issues
crates.iopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- deps.dev does not index crates:proguard@5.10.4; advisories assessed against the repository dependency graph instead
More detail
Star and fork history 0 ★ / 8 ⇿
0Stars
8Forks
25Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 3Minor 11Patch 11
Each point covers 8 days.
OpenSSF Scorecard 5.6 / 10
5.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 5 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 18 out of 18 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 6 | Code-Review | Found 18/30 approved changesets -- score normalized to 6 |
| 10 | Contributors | project has 17 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 3 | Maintained | 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| n/a | Packaging | packaging workflow not detected |
| 10 | Pinned-Dependencies | all dependencies are pinned |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Direct dependencies 5
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| crates.io | serde | 1.0.219 | Cargo.toml |
| crates.io | serde_json | 1.0.140 | Cargo.toml |
| crates.io | thiserror | 2.0.17 | Cargo.toml |
| crates.io | uuid | 1.18.0 | Cargo.toml |
| crates.io | watto | 0.2.0 | Cargo.toml |
All dependencies 69
Full resolved dependency set from the GitHub dependency graph: 5 direct and 64 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| crates.io | serde | 1.0.228 | direct |
| crates.io | serde_json | 1.0.145 | direct |
| crates.io | thiserror | 2.0.17 | direct |
| crates.io | uuid | 1.18.1 | direct |
| crates.io | watto | 0.2.0 | direct |
| crates.io | aho-corasick | 1.1.4 | indirect |
| crates.io | allocator-api2 | 0.2.21 | indirect |
| crates.io | anes | 0.1.6 | indirect |
| crates.io | anstyle | 1.0.13 | indirect |
| crates.io | autocfg | 1.5.0 | indirect |
| crates.io | bumpalo | 3.19.0 | indirect |
| crates.io | cast | 0.3.0 | indirect |
| crates.io | cfg-if | 1.0.4 | indirect |
| crates.io | ciborium | 0.2.2 | indirect |
| crates.io | ciborium-io | 0.2.2 | indirect |
| crates.io | ciborium-ll | 0.2.2 | indirect |
| crates.io | clap | 4.5.53 | indirect |
| crates.io | clap_builder | 4.5.53 | indirect |
| crates.io | clap_lex | 0.7.6 | indirect |
| crates.io | criterion | 0.7.0 | indirect |
| crates.io | criterion-plot | 0.6.0 | indirect |
| crates.io | crossbeam-deque | 0.8.6 | indirect |
| crates.io | crossbeam-epoch | 0.9.18 | indirect |
| crates.io | crossbeam-utils | 0.8.21 | indirect |
| crates.io | crunchy | 0.2.4 | indirect |
| crates.io | either | 1.15.0 | indirect |
| crates.io | equivalent | 1.0.2 | indirect |
| crates.io | foldhash | 0.1.5 | indirect |
| crates.io | half | 2.7.1 | indirect |
| crates.io | hashbrown | 0.15.5 | indirect |
| crates.io | itertools | 0.13.0 | indirect |
| crates.io | itoa | 1.0.15 | indirect |
| crates.io | js-sys | 0.3.83 | indirect |
| crates.io | leb128 | 0.2.5 | indirect |
| crates.io | memchr | 2.7.6 | indirect |
| crates.io | num-traits | 0.2.19 | indirect |
| crates.io | once_cell | 1.21.3 | indirect |
| crates.io | oorandom | 11.1.5 | indirect |
| crates.io | plotters | 0.3.7 | indirect |
| crates.io | plotters-backend | 0.3.7 | indirect |
| crates.io | plotters-svg | 0.3.7 | indirect |
| crates.io | proc-macro2 | 1.0.103 | indirect |
| crates.io | quote | 1.0.42 | indirect |
| crates.io | rayon | 1.11.0 | indirect |
| crates.io | rayon-core | 1.13.0 | indirect |
| crates.io | regex | 1.12.2 | indirect |
| crates.io | regex-automata | 0.4.13 | indirect |
| crates.io | regex-syntax | 0.8.8 | indirect |
| crates.io | rustversion | 1.0.22 | indirect |
| crates.io | ryu | 1.0.20 | indirect |
| crates.io | same-file | 1.0.6 | indirect |
| crates.io | serde_core | 1.0.228 | indirect |
| crates.io | serde_derive | 1.0.228 | indirect |
| crates.io | sha1_smol | 1.0.1 | indirect |
| crates.io | syn | 2.0.111 | indirect |
| crates.io | thiserror-impl | 2.0.17 | indirect |
| crates.io | tinytemplate | 1.2.1 | indirect |
| crates.io | unicode-ident | 1.0.22 | indirect |
| crates.io | walkdir | 2.5.0 | indirect |
| crates.io | wasm-bindgen | 0.2.106 | indirect |
| crates.io | wasm-bindgen-macro | 0.2.106 | indirect |
| crates.io | wasm-bindgen-macro-support | 0.2.106 | indirect |
| crates.io | wasm-bindgen-shared | 0.2.106 | indirect |
| crates.io | web-sys | 0.3.83 | indirect |
| crates.io | winapi-util | 0.1.11 | indirect |
| crates.io | windows-link | 0.2.1 | indirect |
| crates.io | windows-sys | 0.61.2 | indirect |
| crates.io | zerocopy | 0.8.30 | indirect |
| crates.io | zerocopy-derive | 0.8.30 | indirect |
Dependency advisories 1
This repository publishes no package the index resolves, so its own dependency graph was assessed — 69 packages, which also include development and test pins that never ship: 1 carry known advisories, of which 0 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| crossbeam-epoch | 0.9.18 | indirect | unknown | 1 | 0.9.20 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"tag-production"
],
"is_fork": false,
"size_kb": 2340,
"has_wiki": false,
"homepage": null,
"languages": {
"Rust": 283364,
"Shell": 1283,
"Kotlin": 13852,
"Makefile": 594
},
"pushed_at": "2026-07-28T12:22:01Z",
"created_at": "2017-06-02T14:00:05Z",
"owner_type": "Organization",
"updated_at": "2026-07-28T12:24:07Z",
"description": "A rust library for handling proguard mapping files",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "https://sentry.io",
"name": "Sentry",
"type": "Organization",
"login": "getsentry",
"company": null,
"location": "United States of America",
"followers": 3133,
"avatar_url": "https://avatars.githubusercontent.com/u/1396951?v=4",
"created_at": "2012-02-01T06:56:22Z",
"is_verified": null,
"public_repos": 792,
"account_age_days": 5291
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "5.10.4",
"kind": "patch",
"published_at": "2026-07-28T12:21:58Z"
},
{
"tag": "5.10.3",
"kind": "patch",
"published_at": "2026-04-23T11:31:44Z"
},
{
"tag": "5.10.2",
"kind": "patch",
"published_at": "2026-04-21T13:18:04Z"
},
{
"tag": "5.10.1",
"kind": "patch",
"published_at": "2026-03-10T10:44:22Z"
},
{
"tag": "5.10.0",
"kind": "minor",
"published_at": "2026-03-03T12:52:36Z"
},
{
"tag": "5.9.0",
"kind": "minor",
"published_at": "2025-12-18T14:19:00Z"
},
{
"tag": "5.8.1",
"kind": "patch",
"published_at": "2025-12-01T09:46:44Z"
},
{
"tag": "5.8.0",
"kind": "minor",
"published_at": "2025-11-27T09:04:04Z"
},
{
"tag": "5.7.0",
"kind": "minor",
"published_at": "2025-11-10T15:22:03Z"
},
{
"tag": "5.6.2",
"kind": "patch",
"published_at": "2025-07-17T16:21:21Z"
},
{
"tag": "5.6.1",
"kind": "patch",
"published_at": "2025-07-17T11:26:39Z"
},
{
"tag": "5.6.0",
"kind": "minor",
"published_at": "2025-07-14T14:54:19Z"
},
{
"tag": "5.5.0",
"kind": "minor",
"published_at": "2024-07-03T14:34:43Z"
},
{
"tag": "5.4.1",
"kind": "patch",
"published_at": "2024-04-04T13:05:15Z"
},
{
"tag": "5.4.0",
"kind": "minor",
"published_at": "2023-11-30T13:49:09Z"
},
{
"tag": "5.3.0",
"kind": "minor",
"published_at": "2023-11-13T14:31:19Z"
},
{
"tag": "5.2.0",
"kind": "minor",
"published_at": "2023-11-10T15:41:04Z"
},
{
"tag": "5.1.0",
"kind": "minor",
"published_at": "2023-10-23T09:05:25Z"
},
{
"tag": "5.0.2",
"kind": "patch",
"published_at": "2023-06-23T06:44:10Z"
},
{
"tag": "5.0.1",
"kind": "patch",
"published_at": "2023-03-23T15:52:41Z"
},
{
"tag": "5.0.0",
"kind": "major",
"published_at": "2022-05-20T09:54:32Z"
},
{
"tag": "4.1.1",
"kind": "patch",
"published_at": "2021-03-19T12:10:31Z"
},
{
"tag": "4.1.0",
"kind": "minor",
"published_at": "2021-03-09T12:00:56Z"
},
{
"tag": "4.0.1",
"kind": "patch",
"published_at": "2020-06-09T11:54:42Z"
},
{
"tag": "4.0.0",
"kind": "major",
"published_at": "2020-06-05T10:18:47Z"
},
{
"tag": "3.0.0",
"kind": "major",
"published_at": "2020-03-24T08:17:16Z"
}
],
"recent_commits": [
{
"oid": "e671c50d1c292201a7e476643efffd47e9033f93",
"body": null,
"is_bot": true,
"headline": "Merge branch 'release/5.10.4'",
"author_name": "sentry-release-bot[bot]",
"author_login": "sentry-release-bot[bot]",
"committed_at": "2026-07-28T12:21:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de56e9d3fd257f8a2f0783b768f9649b36369ecd",
"body": null,
"is_bot": false,
"headline": "release: 5.10.4",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2026-07-28T12:19:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a987ad4f2aa3a1c5d3311be29d6a26d0979c0d58",
"body": "Running cargo build locally revealed a diff within `Cargo.lock`, as\ncargo build seems to silently patch the package version, ensuring it\nmatches Cargo.toml.\n\nThis PR:\n\n* Manually updates `Cargo.lock` package version to `\"5.10.3\"`, so it\nmatches `Cargo.toml`.\n* Updates the bump version script to run \n[…]\nb.com/getsentry/vroomrs/blob/56ae8efe7e90ec9528c8698c50a67bebad77c74a/scripts/bump-version.sh#L17)\ndoes, and works when run by craft (`cargo update --offline` would have\nfailed on a cold cargo cache).",
"is_bot": false,
"headline": "chore(cargo): Update stale lock file (#96)",
"author_name": "Markus Hintersteiner",
"author_login": "markushi",
"committed_at": "2026-07-28T12:14:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "521f712280319a2f869c1b7a38f994c642e8e3ac",
"body": "…ure are present (#95)",
"is_bot": false,
"headline": "fix(mapping): Report a single frame when no line number and no signat…",
"author_name": "Markus Hintersteiner",
"author_login": "markushi",
"committed_at": "2026-07-28T08:47:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9d986f8577b9d3e421f77646cfef39d17b0a4b3",
"body": null,
"is_bot": true,
"headline": "Merge branch 'release/5.10.3'",
"author_name": "sentry-release-bot[bot]",
"author_login": "sentry-release-bot[bot]",
"committed_at": "2026-04-23T11:31:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3f74bac58536971c448669fe3e2668a8a0a2646",
"body": null,
"is_bot": false,
"headline": "release: 5.10.3",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2026-04-23T11:29:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f32d99092caf849d8b91e1a8f14622c21a773de8",
"body": "…etic wrappers (#94)\n\nFix synthesized source filenames for Compose-compiler-generated\n`ComposableSingletons$FileKt` classes when they are inlined through R8\nsynthetic lambdas.\n\nWhen a Compose compilation emits a `ComposableSingletons$MainActivityKt`\nclass, the mapping often does not include a top-le\n[…]\ningletons$MyScreenKt` lambda\ninlined through an `$$ExternalSyntheticLambda` whose `sourceFile` is\n`R8$$SyntheticClass`.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(mapping): Synthesize filenames for Kotlin classes buried in synth…",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-04-23T10:35:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "28dfb00e182467305b2f3e3cd097ac2ab03e3533",
"body": null,
"is_bot": true,
"headline": "Merge branch 'release/5.10.2'",
"author_name": "sentry-release-bot[bot]",
"author_login": "sentry-release-bot[bot]",
"committed_at": "2026-04-21T13:18:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e813b71c9b1798ce2c172afe15bbcd376be2582",
"body": null,
"is_bot": false,
"headline": "release: 5.10.2",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2026-04-21T13:15:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f8317b7eb4fa2a7766285361b2cc39bf341aa70",
"body": "Parse Compose mappings with flexible indentation\n\n`ComposeStackTrace -> $$compose:` sections generated by recent Android\nbuilds use two-space member indentation. The Compose compiler emits\nthose entries with two leading spaces in\nhttps://github.com/JetBrains/kotlin/blob/effb244358aec74b7fa752d70a105\n[…]\nember lines and adds focused mapper and cache\nregressions for the raw Compose stacktrace shape.\n\nRefs getsentry/sentry-android-gradle-plugin#1065\n\n---------\n\nCo-authored-by: Codex <noreply@openai.com>",
"is_bot": false,
"headline": "fix(mapping): Parse Compose mappings with flexible indentation (#93)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-04-21T13:12:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9922a41a78525f9fb15a0746e6c5469b7d867faa",
"body": "## Summary\n- The Gitiles JSON API returns CAPTCHA/rate-limit pages on shared GitHub\nActions runner IPs, causing the retrace spec check to\n[fail](https://github.com/getsentry/rust-proguard/actions/runs/24074103715/job/70218089282)\nwith `jq: parse error`\n- Switch from Gitiles HTTP API to shallow `git \n[…]\nruns successfully locally\n- [ ] Verify the scheduled CI job passes\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Use git protocol for retrace spec check (#92)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-04-07T13:25:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "269214b5baa29b416f5fc37e70dbba4ead57b8ed",
"body": null,
"is_bot": false,
"headline": "chore: pin GitHub Actions to full-length commit SHAs (#91)",
"author_name": "joshuarli",
"author_login": "joshuarli",
"committed_at": "2026-03-25T04:01:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e148644bb333e66e6e03ded426e09ba6bbdee306",
"body": "## Summary\n- Adds a daily GHA workflow that checks if the upstream R8 retrace\nmapping spec (`doc/retrace.md`) has been updated\n- Mirrors the approach from\n[sentry-java#5157](https://github.com/getsentry/sentry-java/pull/5157)\nfor the tombstone proto schema\n- Allows us to react to retrace format chan\n[…]\nhe script runs successfully locally and reports \"Spec is\nup to date\"\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: Add scheduled job to check for retrace spec changes (#90)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-03-10T13:06:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b2bb6de9deeedd3fb47672ac1a8fa57d61c26a22",
"body": null,
"is_bot": false,
"headline": "chore(codeowners): Update CODEOWNERS to reflect new ownership (#89)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-03-10T12:50:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "964e0f397242155cfa14a916897a3469d51cdd1f",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.10.1'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2026-03-10T10:44:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a98e339b8a4efa07cdb1a3155fcabfbcafa55398",
"body": null,
"is_bot": false,
"headline": "release: 5.10.1",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2026-03-10T10:42:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74ba936101781923e2d1404a58eaef6f3d059ea5",
"body": "## Summary\n- When a frame has no line number and there are no base entries\n(endline==0), detect if the first range group forms an inline chain\n(multiple entries sharing the same startline/endline) and resolve each\nentry with its proper original line instead of emitting all entries with\nline 0\n- This\n[…]\ny with mapping files that contain inline groups without base\nentries\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Resolve inline groups in no-base-entries fallback (#88)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-03-10T10:41:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "df1c7630680682e123d5933fde89ac6b05426e2a",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.10.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2026-03-03T12:52:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4773a141319deb7eed117ecabc2cecc1d379dc88",
"body": null,
"is_bot": false,
"headline": "release: 5.10.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2026-03-03T12:50:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0ca873d3acc4004a956d06208cdb93c0a346312",
"body": "Part of #40\n\nPropagates the class-level `is_synthesized` flag (from `#\n{\"id\":\"com.android.tools.r8.synthesized\"}` headers) to all members of\nthat class. This allows callers (e.g. Sentry symbolicator) to filter out\nsynthetic frames via `method_synthesized()` — this crate intentionally\nkeeps them in t\n[…]\nd moved synthesized info — including both mapper and\ncache paths, stacktrace remapping, and `method_synthesized()` flag\nverification\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(r8): Propagate class-level synthesized flag to members (#73)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-03-03T12:41:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ebd61d121461a5634ab05a6a455b07c5654c5e52",
"body": "Part of #40 \n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [x] Ambiguous Methods (21 tests) - multiple methods → same obfuscated\nname, <OR> alternatives\n- [x] Outlines (4 tests) - outline callsites, nested outlines,\ninline-in\n[…]\nsts) - obfuscated exceptions, suppressed,\ncircular refs\n- [x] Method Overloading (4 tests) - overloads with/without ranges\n- [ ] Special Formats (4 tests) - Java 9+ modules, logcat format,\nauto-detect",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 method overloading tests (#77)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-02-16T14:36:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b7c89b7e94718b614c8679afccd897ce8b3321a",
"body": "Part of #40 \n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [x] Ambiguous Methods (21 tests) - multiple methods → same obfuscated\nname, <OR> alternatives\n- [x] Outlines (4 tests) - outline callsites, nested outlines,\ninline-in\n[…]\nsts) - obfuscated exceptions, suppressed,\ncircular refs\n- [ ] Method Overloading (4 tests) - overloads with/without ranges\n- [ ] Special Formats (4 tests) - Java 9+ modules, logcat format,\nauto-detect",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 exception handling tests (#76)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-02-16T14:07:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aad94103bdefdcc32b883cb356882b1ad3de8773",
"body": "Part of #40 \n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [x] Ambiguous Methods (21 tests) - multiple methods → same obfuscated\nname, <OR> alternatives\n- [x] Outlines (4 tests) - outline callsites, nested outlines,\ninline-in\n[…]\n Overloading (4 tests) - overloads with/without ranges\n- [ ] Special Formats (4 tests) - Java 9+ modules, logcat format,\nauto-detect\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 line number tests (#75)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-02-16T13:50:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fb53ccf54efab2ed3e56be02f118cd8b033804c6",
"body": "Part of #40 \n\nUnsure if we actually have to handle such weird inputs, but I guess we\nbetter be on the safe side and parse those correctly.\n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [x] Ambiguous Methods (21 tests) - multi\n[…]\nsts) - obfuscated exceptions, suppressed,\ncircular refs\n- [ ] Method Overloading (4 tests) - overloads with/without ranges\n- [ ] Special Formats (4 tests) - Java 9+ modules, logcat format,\nauto-detect",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 source file tests (#74)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-01-30T09:56:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "efdfbb2cfbc2cef93c2794f084020e2b729b10d5",
"body": "Part of #40 \n\nThere are failing tests in this PR that need fixes in the mapper/cache\nitself, so I will open a follow-up PR that targets this branch.\n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [x] Ambiguous Methods (21 test\n[…]\nsts) - obfuscated exceptions, suppressed,\ncircular refs\n- [ ] Method Overloading (4 tests) - overloads with/without ranges\n- [ ] Special Formats (4 tests) - Java 9+ modules, logcat format,\nauto-detect",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 ambiguous tests (#71)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2026-01-28T17:03:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "40d6195d2e2825392f98c20107872750c4da80af",
"body": "Part of #40 \n\nThere are failing tests in this PR that need fixes in the mapper/cache\nitself, so I will open a follow-up PR that targets this branch.\n\n## R8 Retrace Test Coverage\n- [x] Inlining (13 tests) - inline frames, line numbers, source files,\nrewriteFrame rules\n- [ ] Ambiguous Methods (7 tests\n[…]\nIdentity/Passthrough (2 tests) - identity mappings\n- [ ] Real-World Bot Tests (4 tests) - production stack traces\n- [ ] Edge Cases (6 tests) - invalid input, dashes in names, whitespace,\nfield overlap",
"is_bot": false,
"headline": "feat(r8-tests): Add R8 inline tests (#69)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-12-19T15:18:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1398ff4158496d18ef555f66cdb6f433c892d538",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.9.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-12-18T14:19:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0f2384417125bcea33699492bff99d4e1e467fb",
"body": null,
"is_bot": false,
"headline": "release: 5.9.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-12-18T14:17:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f128644b29fb01c84d8329fc896e95baabe6984",
"body": "Closes https://github.com/getsentry/rust-proguard/issues/63\n\n- Store rewrite rules in ProguardCache format\n- Decode rewrite rules and use them for symbolication\n- Additionally parse the exception descriptor\n- Make new methods public to be consumed in symbolicator later on\n\nSee linked issue for more details.",
"is_bot": false,
"headline": "feat(r8): Support `rewriteFrames` annotation in ProguardCache (#67)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-12-18T14:15:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08f5382d989834404bc903d26796d3f5a384805d",
"body": "Part of #63\n\n- Added new header parsing\n- Adapted ProguardMapper to ccollect the frames and then apply the\nrewrite rules on the entire vector\n- Added parsing of the exception for `remap_stacktrace` which accepts a\nplain string -- we need that info to decide whether we remove inner\nframes or not\n\nSee linked issue for more details.",
"is_bot": false,
"headline": "feat(r8): Support `rewriteFrames` annotation in ProguardMapper (#66)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-12-17T13:06:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce85efb37d553469a4fc583a643bd7067fb57d26",
"body": "We have been omitting mappings which had `0` in the line info range,\nhowever those are still valid mappings, for example:\n\n```\n 0:16:com.example.maps.core.projection.marker.IProjectionMarker createProjectionMarkerInternal(com.example.maps.core.projection.marker.IProjectionMarkerOptions,com.exampl\n[…]\n incorrect remapping back to line 0 instead of 133. \nThis PR fixes it + additionally added a check to look ahead if there are\nmembers with line info for the `0:0` case (replicates r8-retrace\nbehavior)",
"is_bot": false,
"headline": "fix: Correctly remap entries with 0 line info (#68)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-12-10T10:23:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a079fdf443df905203eca3a68e1e5b4ad103f9ad",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.8.1'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-12-01T09:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adeeec6d631462103ef5a29f1da389f2b651875c",
"body": null,
"is_bot": false,
"headline": "release: 5.8.1",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-12-01T09:44:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "523310c390a6b7ded017df6932e6e1bcc466deb4",
"body": "This updates:\n* criterion 0.4 -> 0.7\n* thiserror 1.0.61 -> 2.0.17\n* uuid 1.0.0 -> 1.18.0\n* watto 0.1.0 -> 0.2.0",
"is_bot": false,
"headline": "build: Update dependencies and set MSRV 1.83.0 (#65)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-12-01T09:44:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e528091b4103c3ab4823c4e481cb5286cdf6f4cd",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.8.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-11-27T09:04:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb48ac1bfacbede6c131b23dfdff59ccbfb58e8d",
"body": null,
"is_bot": false,
"headline": "release: 5.8.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-11-27T09:02:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5eb0624c566919d2606c017a04450d2b5a090b2",
"body": "This is needed to reimplement outline support in symbolicator",
"is_bot": false,
"headline": "feat(outline): Expose is_outline and prepare_frame_for_mapping (#64)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-11-27T08:33:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "baf2d05fc69a9c47a13cec781c3561be04337996",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.7.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-11-10T15:22:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "898b81bf7551d13adb81f486306b71ecc9b7aa5f",
"body": null,
"is_bot": false,
"headline": "release: 5.7.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-11-10T15:19:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "305eabd25b66693e12235181d8d2e54371dda442",
"body": "…Cache (#62)\n\nSame as #60 but implements the necessary changes for `outline` and\n`outlineCallsite` in ProguardCache\n\nCloses #59",
"is_bot": false,
"headline": "feat(r8): Support outline and outlineCallsite annotations in Proguard…",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-11-10T15:18:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce3f3c950bd18957bb0b2e8b0134222805b1d40c",
"body": "…Mapping (#60)\n\nThis only targets `ProguardMapping` at the moment, will address\n`ProguardCache` in a separate PR\n\nPart of #59",
"is_bot": false,
"headline": "feat(r8): Support outline and outlineCallsite annotations in Proguard…",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-11-10T10:14:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "695c543923f090a08d1261176a9c0a5a482464dc",
"body": null,
"is_bot": false,
"headline": "build: Fix new compiler warnings (#61)",
"author_name": "Roman Zavarnitsyn",
"author_login": "romtsn",
"committed_at": "2025-10-24T10:05:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f47c6a5ea9fbe2260b9bd6a0d4740434e627da4",
"body": null,
"is_bot": false,
"headline": "ref: Forbid `unwrap` except in tests and benches (#58)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-07-18T10:51:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9841a5072a21cede6b9d9ddc944eb3e163de8b8",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.6.2'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-07-17T16:21:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea17dd657e76e688530385a6d917d23989a13873",
"body": null,
"is_bot": false,
"headline": "release: 5.6.2",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-07-17T16:19:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d862fc3393b8c77f7a53e3970ffcc1885d46b396",
"body": null,
"is_bot": false,
"headline": "fix(r8): Handle invalid headers gracefully (#57)",
"author_name": "David Herberth",
"author_login": "Dav1dde",
"committed_at": "2025-07-17T16:04:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac2d168008d47833813928bdf6ac30103f1488e9",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.6.1'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-07-17T11:26:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef41c9492b96c111301ad120ae10885930803b0b",
"body": null,
"is_bot": false,
"headline": "release: 5.6.1",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-07-17T11:24:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35c216f0bfc03dd752702da3be48a8ee05b12017",
"body": null,
"is_bot": false,
"headline": "feat(cache): Expose current cache version constant (#56)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-07-17T11:23:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c50fc294acf74b867d4700288d1baffe57bf09f",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.6.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2025-07-14T14:54:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aba6ab7d1f6e4cf7c76770e94f113fdeb3ef3677",
"body": null,
"is_bot": false,
"headline": "release: 5.6.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2025-07-14T14:52:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e64ae5a595e9cd6e069ef396daaafca43f27e58",
"body": "This adds support for \"synthesized\" class and member annotations.\n\n* It adds a new variant `Synthesized` to `R8Header` to parse these\nannotations.\n* It adds `is_synthesized` flags to `ClassMapping` and `MemberMapping`\nand their corresponding cache types. In the cache the flags have type\n`u8` because\n[…]\nreturn exactly the same frames as before, but some of them\nmight be marked as synthesized. This means it's up to the caller to\ndecide what to do with synthesized frames.\n\nCloses #48. Closes RUSTPRO-3.",
"is_bot": false,
"headline": "feat: Handle \"synthesized\" class/member annotations (#52)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-07-14T14:51:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2d3ec7bb8c43ac7e8151a85ca80fcc35f6bd435e",
"body": "Previously, `ProguardCache` and `ProguardMapper` both implemented their\n(structurally very similar) parsing functions. These parsing functions\nleft a lot to be desired; the simply took records in the order they were\nencountered and were unable to use later information to refine\npreviously encountere\n[…]\n `ProguardMapper` or\n`ProguardCache`, as required.\n\nFixes #54. Fixes RUSTPRO-4.\n\nAs a follow-up I would like to use the newly introduced `ObfuscatedName`\nand `OriginalName` types throughout the crate.",
"is_bot": false,
"headline": "ref: Parse ProGuard files smarter (#55)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-07-14T12:49:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "248d6b5487ca95b5a45f83cc19267adb4e762498",
"body": null,
"is_bot": false,
"headline": "chore: Fix 1.88.0 clippy lints (#53)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-06-27T09:07:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "309d4c7764f100d97516dc4fad433fc41e5628c3",
"body": "R8 headers have a different format from \"normal\" ProGuard headers. This\nsplits the parsing of the two header formats apart and uses `serde` for\nR8 headers (they are specified to be in JSON format).\n\nSee\nhttps://r8.googlesource.com/r8/+/refs/heads/main/doc/retrace.md#additional-information-appended-as-comments-to-the-file\nfor R8 headers.",
"is_bot": false,
"headline": "ref: Robustly parse R8 headers (#50)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-06-26T12:24:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a1f7178721428ae972863ab9ca823923e47f93e",
"body": "This uses the std `LazyLock` instead of `lazy_static`.",
"is_bot": false,
"headline": "ref: Remove lazy_static dependency (#51)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-06-25T11:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4851067601863e4219763f94e6b3bd6486c07068",
"body": null,
"is_bot": false,
"headline": "chore: Clippy (#49)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-06-25T09:27:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff576f16536c20cb9756f8bd69bd2d693eb8c619",
"body": null,
"is_bot": false,
"headline": "chore: Simplify check (#47)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2025-01-21T09:08:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6dd8b78cb632826dd538c061bc64ea7cb694abd",
"body": "The `getsentry-release` is a GitHub bot account that is used in various\nautomation, and the `${{ secrets.GH_RELEASE_PAT }}` is a personal access\ntoken from that bot account. We are using a regular GitHub account as a\nbot while it should be a non-human account since there are no humans\nbehind it. Hen\n[…]\ne, there will be no difference. \n\nMore details:\nhttps://www.notion.so/sentry/DACI-Replace-GitHub-bot-accounts-with-GitHub-Apps-getsentry-release-15109965d1204a91b9be71c49e8b66e0?pvs=4\n\n#skip-changelog",
"is_bot": false,
"headline": "feat(release): Replace release bot with GH app (#45)",
"author_name": "Jeffrey Hung",
"author_login": "Jeffreyhung",
"committed_at": "2024-12-17T17:08:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e3cbeb55da7c9371d89de2a3c057dcf281408acf",
"body": null,
"is_bot": false,
"headline": "chore(lint): Elided lifetimes (#46)",
"author_name": "Joris Bayer",
"author_login": "jjbayer",
"committed_at": "2024-12-17T08:39:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85f067be40f48d3a3b5e830f71c463ec739a20a9",
"body": "This adds a benchmark for creating a cache from a proguard mapping file\r\n(as distinct from parsing an already written cache file).",
"is_bot": false,
"headline": "cache: Add creation benchmark (#44)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-04T13:47:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4daf9d17f946f8cf202b6ec176ec9f4d14559e12",
"body": null,
"is_bot": false,
"headline": "Merge branch 'release/5.5.0'",
"author_name": "getsentry-bot",
"author_login": null,
"committed_at": "2024-07-03T14:34:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2cf7cfadb71182ae77f0d059d7c33c89b938536",
"body": null,
"is_bot": false,
"headline": "release: 5.5.0",
"author_name": "getsentry-bot",
"author_login": "getsentry-bot",
"committed_at": "2024-07-03T14:32:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "294298c4b439ddd4cbd14eac0168ec240de8f4ab",
"body": "* Use chars instead of char_indices in one instance\r\n* Remove ClassIndex functionality (superseded by ProguardCache)\r\n* Use dep: syntax for uuid dependency\r\n* Update edition to 2021\r\n* Commit Cargo.lock",
"is_bot": false,
"headline": "ref: Various cleanup tasks (#43)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cfabb2e12f2342bf4b23a7991e0d28846104208",
"body": null,
"is_bot": false,
"headline": "Commit Cargo.lock",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26f496c62113229d4b74efc9abf5863c4ba7b74b",
"body": null,
"is_bot": false,
"headline": "Update edition to 2021",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dde46ee84cd17a0bc451dae9658c87c4636a434",
"body": null,
"is_bot": false,
"headline": "Don't rename uuid dep",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30b6b11f360cdc39b49c40d30f67da1a01496c2e",
"body": null,
"is_bot": false,
"headline": "Remove ClassIndex",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a74886fd7316297bd83e9ae4931c1026e7878e0",
"body": null,
"is_bot": false,
"headline": "Use chars",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a5ea7ca6a02f4ed55869f057c8b4442132cfb0",
"body": "This introduces a stable binary format similar to SymCache.\r\nIt allows lookups that are fast, if not as fast as via a `ProguardMapper`,\r\nbut doesn't require parsing the entire file into memory.",
"is_bot": false,
"headline": "feat: Introduce ProguardCache format (#42)",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T14:06:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "055d9a43c903c1dd9c0b16aa53ac8da57c10da18",
"body": null,
"is_bot": false,
"headline": "Add module docs",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-03T11:31:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dff15409c990a0231534b539d86b159c64c999d",
"body": null,
"is_bot": false,
"headline": "Write vectors at once",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T13:48:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beab1645ffd66c49b16db76bac3330aa510492bb",
"body": null,
"is_bot": false,
"headline": "Feedback",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T12:24:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83ced60100e76d4480b633e8a73f1d4b7e056e94",
"body": null,
"is_bot": false,
"headline": "Abstract out the binary search and use it in remap_method",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T12:06:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d09f304e55d3b8cd4b6d10d89918c2f2a46cbe7",
"body": null,
"is_bot": false,
"headline": "cache.rs -> cache/mod.rs",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "808e477127108f36d014188d9756aea50171f1f9",
"body": null,
"is_bot": false,
"headline": "Add parsing + mapping benchmarks",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:40:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f90d7c479a40e0e089b51c4a220a9b47bf7e665",
"body": null,
"is_bot": false,
"headline": "Missed something",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:30:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45e473955e208e0855e13c90deda505bda546cb4",
"body": null,
"is_bot": false,
"headline": "Use correct name of cache everywhere",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:25:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "318be0636588db78205caa8645e250cb87463ef9",
"body": null,
"is_bot": false,
"headline": "Rename error types",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:24:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "173dc9ec38dfda77aca4ca812def9faa537ec5bf",
"body": null,
"is_bot": false,
"headline": "debug: use references",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:21:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2974c8e90a27dd8815b9a537bb700f4bfa7036b5",
"body": "Co-authored-by: Arpad Borsos <arpad.borsos@sentry.io>",
"is_bot": false,
"headline": "Update src/cache/raw.rs",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T11:19:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34e115a66395780ca06760315004f7687a830435",
"body": null,
"is_bot": false,
"headline": "Add cache to parsing benchmark",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T10:51:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c6267e5ce05868cdde6ab8a8b077b35c6a9afac",
"body": null,
"is_bot": false,
"headline": "Remove unwrap in binary search",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-02T10:23:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dec14eed1cc98843609f3f977c36a0126548fff",
"body": null,
"is_bot": false,
"headline": "Remove test I committed by mistake",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:55:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8c61bffddf2ac32c4866cad13d6062513ec381a",
"body": null,
"is_bot": false,
"headline": "Typo",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:53:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d66ac9b682ab2959a2f83ec013bcfd51bae27439",
"body": null,
"is_bot": false,
"headline": "Cleanup",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:51:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91f04584c8654cadfb44b703303380b35db294a7",
"body": null,
"is_bot": false,
"headline": "Expand test coverage",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:47:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f14996cbb700970d8d817e8dd46a151760023040",
"body": null,
"is_bot": false,
"headline": "Add remapping benchmark",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:36:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c4a1db923f87a0bcffdfa8ea383ef71e2ea30a1",
"body": null,
"is_bot": false,
"headline": "Use binary search more aggressively",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T20:08:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c206ebb385cb45344f97917cd0bcc2fb6e90f0bb",
"body": null,
"is_bot": false,
"headline": "Improve debug impls and add display",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T19:31:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f725d568fc7787510a29bf7aa5c8941442f4ff8",
"body": null,
"is_bot": false,
"headline": "Add read_string and test",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T19:29:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b18369c4a805c5596428ffa04ab0592d3100fff3",
"body": null,
"is_bot": false,
"headline": "Remove commented code and add another debug method",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T17:09:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f12841abd25ebb4f1a21e77473c74c167340cc9d",
"body": null,
"is_bot": false,
"headline": "feat: Introduce ProguardCache format",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T16:45:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5f8d8fdc49448a23359329939d51e40bb7749e2",
"body": null,
"is_bot": false,
"headline": "WIP",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-07-01T10:30:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf3ec0ae0f4386f9dd2861b95ffd9259fb15d350",
"body": null,
"is_bot": false,
"headline": "feat: Add class indices to proguard mappings",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-27T10:23:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b295986737c1f5a8a538534c3e18ef9f7b809df0",
"body": null,
"is_bot": false,
"headline": "Require &str in parse",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-26T10:12:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "214ec5a5d652e35ee1cf02ae53121816a712a8f8",
"body": null,
"is_bot": false,
"headline": "Use offset_from",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-26T09:52:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d3e3625e5edacdb4e8238ead7977a6ba1261944",
"body": "Co-authored-by: Arpad Borsos <arpad.borsos@sentry.io>",
"is_bot": false,
"headline": "Typo",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-26T09:15:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67b62d9dd352f62409b0ce6acee4c989d15bbc6c",
"body": null,
"is_bot": false,
"headline": "Refactor",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-19T17:11:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80876ec9c0aac41d1aab61ff360d73eab3de4fca",
"body": null,
"is_bot": false,
"headline": "feat: Add `ProguardMapping::write_class_index`",
"author_name": "Sebastian Zivota",
"author_login": "loewenheim",
"committed_at": "2024-06-17T15:22:14Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 26,
"commits_last_year": 42,
"latest_release_at": "2026-07-28T12:21:58Z",
"latest_release_tag": "5.10.4",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 14,
"days_since_latest_release": 0,
"mean_days_between_releases": 41.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "proguard",
"exists": true,
"license": "BSD-3-Clause",
"keywords": [
"android",
"proguard",
"r8",
"retrace"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/proguard",
"is_deprecated": false,
"latest_version": "5.10.4",
"repository_url": "https://github.com/getsentry/rust-proguard",
"versions_count": 33,
"total_downloads": 4372298,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 83681,
"first_published_at": "2017-06-02T14:05:58.921880Z",
"latest_published_at": "2026-07-28T12:21:55.054147Z",
"latest_version_yanked": false,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 8,
"stars": 29,
"watchers": 37,
"fork_history": {
"days": [
{
"date": "2018-06-05",
"count": 1
},
{
"date": "2019-04-25",
"count": 1
},
{
"date": "2021-03-17",
"count": 1
},
{
"date": "2022-11-14",
"count": 1
},
{
"date": "2023-03-02",
"count": 1
},
{
"date": "2024-04-02",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_forks": 8
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml"
],
"largest_source_bytes": 60416,
"source_files_sampled": 27,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "crossbeam-epoch",
"direct": false,
"version": "0.9.18",
"severity": "unknown",
"ecosystem": "crates",
"cvss_score": null,
"advisory_ids": [
"RUSTSEC-2026-0204"
],
"fixed_version": "0.9.20",
"advisory_count": 1,
"oldest_advisory_days": 22
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 69,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "serde",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.219"
},
{
"name": "serde_json",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.140"
},
{
"name": "thiserror",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0.17"
},
{
"name": "uuid",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.18.0"
},
{
"name": "watto",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.2.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "serde",
"direct": true,
"version": "1.0.228",
"ecosystem": "crates"
},
{
"name": "serde_json",
"direct": true,
"version": "1.0.145",
"ecosystem": "crates"
},
{
"name": "thiserror",
"direct": true,
"version": "2.0.17",
"ecosystem": "crates"
},
{
"name": "uuid",
"direct": true,
"version": "1.18.1",
"ecosystem": "crates"
},
{
"name": "watto",
"direct": true,
"version": "0.2.0",
"ecosystem": "crates"
},
{
"name": "aho-corasick",
"direct": false,
"version": "1.1.4",
"ecosystem": "crates"
},
{
"name": "allocator-api2",
"direct": false,
"version": "0.2.21",
"ecosystem": "crates"
},
{
"name": "anes",
"direct": false,
"version": "0.1.6",
"ecosystem": "crates"
},
{
"name": "anstyle",
"direct": false,
"version": "1.0.13",
"ecosystem": "crates"
},
{
"name": "autocfg",
"direct": false,
"version": "1.5.0",
"ecosystem": "crates"
},
{
"name": "bumpalo",
"direct": false,
"version": "3.19.0",
"ecosystem": "crates"
},
{
"name": "cast",
"direct": false,
"version": "0.3.0",
"ecosystem": "crates"
},
{
"name": "cfg-if",
"direct": false,
"version": "1.0.4",
"ecosystem": "crates"
},
{
"name": "ciborium",
"direct": false,
"version": "0.2.2",
"ecosystem": "crates"
},
{
"name": "ciborium-io",
"direct": false,
"version": "0.2.2",
"ecosystem": "crates"
},
{
"name": "ciborium-ll",
"direct": false,
"version": "0.2.2",
"ecosystem": "crates"
},
{
"name": "clap",
"direct": false,
"version": "4.5.53",
"ecosystem": "crates"
},
{
"name": "clap_builder",
"direct": false,
"version": "4.5.53",
"ecosystem": "crates"
},
{
"name": "clap_lex",
"direct": false,
"version": "0.7.6",
"ecosystem": "crates"
},
{
"name": "criterion",
"direct": false,
"version": "0.7.0",
"ecosystem": "crates"
},
{
"name": "criterion-plot",
"direct": false,
"version": "0.6.0",
"ecosystem": "crates"
},
{
"name": "crossbeam-deque",
"direct": false,
"version": "0.8.6",
"ecosystem": "crates"
},
{
"name": "crossbeam-epoch",
"direct": false,
"version": "0.9.18",
"ecosystem": "crates"
},
{
"name": "crossbeam-utils",
"direct": false,
"version": "0.8.21",
"ecosystem": "crates"
},
{
"name": "crunchy",
"direct": false,
"version": "0.2.4",
"ecosystem": "crates"
},
{
"name": "either",
"direct": false,
"version": "1.15.0",
"ecosystem": "crates"
},
{
"name": "equivalent",
"direct": false,
"version": "1.0.2",
"ecosystem": "crates"
},
{
"name": "foldhash",
"direct": false,
"version": "0.1.5",
"ecosystem": "crates"
},
{
"name": "half",
"direct": false,
"version": "2.7.1",
"ecosystem": "crates"
},
{
"name": "hashbrown",
"direct": false,
"version": "0.15.5",
"ecosystem": "crates"
},
{
"name": "itertools",
"direct": false,
"version": "0.13.0",
"ecosystem": "crates"
},
{
"name": "itoa",
"direct": false,
"version": "1.0.15",
"ecosystem": "crates"
},
{
"name": "js-sys",
"direct": false,
"version": "0.3.83",
"ecosystem": "crates"
},
{
"name": "leb128",
"direct": false,
"version": "0.2.5",
"ecosystem": "crates"
},
{
"name": "memchr",
"direct": false,
"version": "2.7.6",
"ecosystem": "crates"
},
{
"name": "num-traits",
"direct": false,
"version": "0.2.19",
"ecosystem": "crates"
},
{
"name": "once_cell",
"direct": false,
"version": "1.21.3",
"ecosystem": "crates"
},
{
"name": "oorandom",
"direct": false,
"version": "11.1.5",
"ecosystem": "crates"
},
{
"name": "plotters",
"direct": false,
"version": "0.3.7",
"ecosystem": "crates"
},
{
"name": "plotters-backend",
"direct": false,
"version": "0.3.7",
"ecosystem": "crates"
},
{
"name": "plotters-svg",
"direct": false,
"version": "0.3.7",
"ecosystem": "crates"
},
{
"name": "proc-macro2",
"direct": false,
"version": "1.0.103",
"ecosystem": "crates"
},
{
"name": "quote",
"direct": false,
"version": "1.0.42",
"ecosystem": "crates"
},
{
"name": "rayon",
"direct": false,
"version": "1.11.0",
"ecosystem": "crates"
},
{
"name": "rayon-core",
"direct": false,
"version": "1.13.0",
"ecosystem": "crates"
},
{
"name": "regex",
"direct": false,
"version": "1.12.2",
"ecosystem": "crates"
},
{
"name": "regex-automata",
"direct": false,
"version": "0.4.13",
"ecosystem": "crates"
},
{
"name": "regex-syntax",
"direct": false,
"version": "0.8.8",
"ecosystem": "crates"
},
{
"name": "rustversion",
"direct": false,
"version": "1.0.22",
"ecosystem": "crates"
},
{
"name": "ryu",
"direct": false,
"version": "1.0.20",
"ecosystem": "crates"
},
{
"name": "same-file",
"direct": false,
"version": "1.0.6",
"ecosystem": "crates"
},
{
"name": "serde_core",
"direct": false,
"version": "1.0.228",
"ecosystem": "crates"
},
{
"name": "serde_derive",
"direct": false,
"version": "1.0.228",
"ecosystem": "crates"
},
{
"name": "sha1_smol",
"direct": false,
"version": "1.0.1",
"ecosystem": "crates"
},
{
"name": "syn",
"direct": false,
"version": "2.0.111",
"ecosystem": "crates"
},
{
"name": "thiserror-impl",
"direct": false,
"version": "2.0.17",
"ecosystem": "crates"
},
{
"name": "tinytemplate",
"direct": false,
"version": "1.2.1",
"ecosystem": "crates"
},
{
"name": "unicode-ident",
"direct": false,
"version": "1.0.22",
"ecosystem": "crates"
},
{
"name": "walkdir",
"direct": false,
"version": "2.5.0",
"ecosystem": "crates"
},
{
"name": "wasm-bindgen",
"direct": false,
"version": "0.2.106",
"ecosystem": "crates"
},
{
"name": "wasm-bindgen-macro",
"direct": false,
"version": "0.2.106",
"ecosystem": "crates"
},
{
"name": "wasm-bindgen-macro-support",
"direct": false,
"version": "0.2.106",
"ecosystem": "crates"
},
{
"name": "wasm-bindgen-shared",
"direct": false,
"version": "0.2.106",
"ecosystem": "crates"
},
{
"name": "web-sys",
"direct": false,
"version": "0.3.83",
"ecosystem": "crates"
},
{
"name": "winapi-util",
"direct": false,
"version": "0.1.11",
"ecosystem": "crates"
},
{
"name": "windows-link",
"direct": false,
"version": "0.2.1",
"ecosystem": "crates"
},
{
"name": "windows-sys",
"direct": false,
"version": "0.61.2",
"ecosystem": "crates"
},
{
"name": "zerocopy",
"direct": false,
"version": "0.8.30",
"ecosystem": "crates"
},
{
"name": "zerocopy-derive",
"direct": false,
"version": "0.8.30",
"ecosystem": "crates"
}
],
"collected": true,
"truncated": false,
"total_count": 69,
"direct_count": 5,
"indirect_count": 64
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 81,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 9,
"closed_unmerged_prs": 5
},
"bus_factor": 3,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "loewenheim",
"commits": 48,
"avatar_url": "https://avatars.githubusercontent.com/u/7622248?v=4"
},
{
"type": "User",
"login": "getsentry-bot",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/10587625?v=4"
},
{
"type": "User",
"login": "romtsn",
"commits": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/4999776?v=4"
},
{
"type": "User",
"login": "Swatinem",
"commits": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/580492?v=4"
},
{
"type": "User",
"login": "mitsuhiko",
"commits": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/7396?v=4"
},
{
"type": "User",
"login": "bruno-garcia",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/1633368?v=4"
},
{
"type": "User",
"login": "jan-auer",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/1433023?v=4"
},
{
"type": "User",
"login": "adinauer",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/2542832?v=4"
},
{
"type": "User",
"login": "viglia",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/5112977?v=4"
},
{
"type": "User",
"login": "markushi",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1411808?v=4"
}
],
"contributors_sampled": 20,
"top_contributor_share": 0.277
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"check-retrace-spec.yml",
"ci.yml",
"enforce-license-compliance.yml",
"release.yml",
"weekly.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"Cargo.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 5,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 6,
"reason": "Found 18/30 approved changesets -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 17 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 3,
"reason": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "e671c50d1c292201a7e476643efffd47e9033f93",
"ran_at": "2026-07-29T04:59:05Z",
"aggregate_score": 5.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-28T12:22:18Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-28T12:14:08Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/getsentry/rust-proguard",
"host": "github.com",
"name": "rust-proguard",
"owner": "getsentry"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 70 is calibrated to 83 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 70,
"calibrated": 83,
"calibration": "2026-08-02"
}
}
],
"value": 83,
"inputs": {
"security": 65,
"vitality": 78,
"community": 57,
"governance": 86,
"calibration": "2026-08-02",
"engineering": 61,
"ai_readiness": 66,
"weighted_overall_raw": 70
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 78,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"commits_last_year": 42,
"human_commit_share": 0.97,
"days_since_last_push": 0,
"active_weeks_last_year": 14
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "14/52 weeks with commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 14
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "42 commits in the last year",
"points": 14.7,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 42
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 26,
"latest_release_tag": "5.10.4",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 41.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "26 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 26
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~41.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 41.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 7,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 7 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 7
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 57,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"forks": 8,
"stars": 29,
"watchers": 37,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "29 stars",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 29
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "8 forks",
"points": 7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 8
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "37 watchers",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 37
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 82,
"inputs": {
"packages": [
"proguard"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 4372298,
"monthly_downloads": 83681
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "83,681 downloads/month across crates",
"points": 65.6,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 83681,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "excellent",
"name": "Sustainability & Governance",
"value": 86,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 20,
"top_contributor_share": 0.277
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 28% of commits",
"points": 16.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 28
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "20 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 20
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 17 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 91,
"inputs": {
"merged_prs": 81,
"open_issues": 0,
"closed_issues": 9,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 5,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "81/86 decided PRs merged",
"points": 28.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 81,
"decided": 86
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 18/30 approved changesets -- score normalized to 6",
"points": 9,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "excellent",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 3133,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "getsentry",
"public_repos": 792,
"account_age_days": 5291
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3,133 followers of getsentry",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3133,
"login": "getsentry"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "792 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 792
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"proguard"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "33 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 33
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [
"tag-production"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "1 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 1
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 65,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "18 out of 18 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 18/30 approved changesets -- score normalized to 6",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 17 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 69 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 69
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 69,
"unassessed_packages": 0,
"affected_by_severity": "unknown 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 69,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 19
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 66,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.577,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "56 of 97 human commits state their intent (structured subject or explanatory body)",
"points": 30.8,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 56,
"sampled": 97
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"Cargo.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.06,
"toolchain_manifests": [
"Cargo.toml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "6 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 6,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 60416,
"source_files_sampled": 27,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/27 source files over 60KB",
"points": 53,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 27,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 8
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:crates",
"weight": 6
},
{
"tier": "description",
"label": "library",
"source": "description:library",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index crates:proguard@5.10.4; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-29T04:59:26.115183Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/getsentry/rust-proguard.svg",
"full_name": "getsentry/rust-proguard",
"license_state": "custom",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — crates.io.