Public recordGood
Software health reportschema 0.30.0 · metrics 2.5.0 · 2026-08-03 16:31 UTC
hexydec / agentzero
A fast and efficient string matching library for extracting information from User-Agent strings
hexydec/agentzero holds a health index of 67 out of 100, placing it in the Good band. It scores highest on Engineering Quality (86/100) and lowest on AI Readiness (39/100). It was last updated today. A single contributor accounts for most of its recent work.
67
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
67
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 61 is calibrated to 67 on the published index scale (record calibration 2026-08-02).
Ownership
Will Earp / HexydecPersonal account
21 followers18 public repossince Apr 2011SWGfL
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| Packagist | hexydec/agentzero | 2.0.3 | 6,581 | 18 | 98 days ago | phpbrowseruser-agents |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
69
Development activity
60Moderate
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 7.6/36 | Commit cadence — 11/52 weeks with commits |
| 12.9/18 | Commit volume — 26 commits in the last year |
| 3/10 | OpenSSF Scorecard: Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
Inputs used
| commits_last_year | 26 |
| human_commit_share | 0.99 |
| days_since_last_push | 0 |
| active_weeks_last_year | 11 |
Release discipline
82Excellent
How it's scored
| 27/27 | Ships releases — 18 releases published |
| 27/36 | Release recency — latest release 98 days ago |
| 19.8/27 | Release cadence — a release every ~89.1 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 18 |
| latest_release_tag | 2.0.3 |
| releases_from_tags | no |
| days_since_latest_release | 98 |
| mean_days_between_releases | 89.1 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
42
Popularity & adoption
28At Risk
How it's scored
| 25.8/60 | Stars — 40 stars |
| 0/25 | Forks — 1 forks |
| 2.7/15 | Watchers — 4 watchers |
Inputs used
| forks | 1 |
| stars | 40 |
| watchers | 4 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| readme_badges | 2 |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| readme_badge_services | github.com, shields.io |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
53Moderate
How it's scored
| 50.9/80 | Monthly downloads — 6,581 downloads/month across packagist |
| 2/20 | Registry dependents — 1 packages depend on it |
Inputs used
| packages | hexydec/agentzero |
| dependents | 1 |
| ecosystems | packagist |
| total_downloads | 134,453 |
| monthly_downloads | 6,581 |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
56
Maintainer resilience (bus factor)
15Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0.1/22.5 | Commit distribution — top contributor authored 99% of commits |
| 2.7/13.5 | Contributor breadth — 2 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.994 |
How it's scored
| 42/42 | Issue resolution — 100% of issues closed |
| 25/30 | PR acceptance — 5/6 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/21 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 5 |
| open_issues | 0 |
| closed_issues | 8 |
| prs_merged_7d | 0 |
| prs_decided_7d | 0 |
| prs_merged_30d | 0 |
| prs_decided_30d | 0 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 1 |
| first_time_authors_30d | 0 |
| first_time_prs_merged_30d | 0 |
| first_time_prs_decided_30d | 0 |
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
51Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 9.7/25 | Owner reach — 21 followers of hexydec |
| 21.3/25 | Track record — 18 public repos, account ~15 yr old |
Inputs used
| followers | 21 |
| owner_type | User |
| is_verified | — |
| owner_login | hexydec |
| public_repos | 18 |
| account_age_days | 5,583 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Exceptional
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on packagist |
| 35/35 | Publish recency — latest publish 98 days ago |
| 20/20 | Version history — 18 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | hexydec/agentzero |
| ecosystems | packagist |
| any_deprecated | no |
| min_days_since_publish | 98 |
Engineering Quality
Are baseline engineering and documentation practices in place?
86
Engineering practices
84Excellent
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — phpstan.neon |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
90Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://hexydec.com/apps/user-agent-parser/ |
| 10/10 | Repository description |
| 10/10 | Topics — 5 topics |
| 0/10 | Wiki |
Inputs used
| topics | php, user-agent, user-agent-parser, useragent, useragentparser |
| has_wiki | no |
| homepage | https://hexydec.com/apps/user-agent-parser/ |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
55
Security posture
44Weak
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/21 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 2.2/7.5 | Maintained — 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4.4 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
100Exceptional
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 28 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 28 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
39
Agent context & guidance
19Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 18.9/40 | Legible commit history — 35 of 99 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.354 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
51Moderate
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — phpstan.neon |
| 0/11 | Static type checking |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 8/8 | Automated maintenance — 1 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | composer.lock |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.01 |
How it's scored
| 0/45 | Type-checkable code — PHP without a type-check config |
| 49.1/55 | Manageable file sizes — 4/37 source files over 60KB |
Inputs used
| primary_language | PHP |
| largest_source_bytes | 83,372 |
| source_files_sampled | 37 |
| oversized_source_files | 4 |
Key facts
40GitHub stars
2contributors
26commits, last 12 months
0days since last push
18releases
1bus factor
0open issues
Packagistpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
OpenSSF Scorecard 4.4 / 10
4.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/21 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 3 | Maintained | 4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
All dependencies 28
Full resolved dependency set from the GitHub dependency graph: 0 direct and 28 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Packagist | myclabs/deep-copy | 1.13.4 | indirect |
| Packagist | nikic/php-parser | 5.8.0 | indirect |
| Packagist | phar-io/manifest | 2.0.4 | indirect |
| Packagist | phar-io/version | 3.2.1 | indirect |
| Packagist | phpstan/phpstan | 2.2.7 | indirect |
| Packagist | phpunit/php-code-coverage | 14.2.4 | indirect |
| Packagist | phpunit/php-file-iterator | 7.0.0 | indirect |
| Packagist | phpunit/php-invoker | 7.0.0 | indirect |
| Packagist | phpunit/php-text-template | 6.0.0 | indirect |
| Packagist | phpunit/php-timer | 9.0.0 | indirect |
| Packagist | phpunit/phpunit | 13.2.6 | indirect |
| Packagist | sebastian/cli-parser | 5.0.1 | indirect |
| Packagist | sebastian/comparator | 8.3.0 | indirect |
| Packagist | sebastian/complexity | 6.0.0 | indirect |
| Packagist | sebastian/diff | 9.0.0 | indirect |
| Packagist | sebastian/environment | 9.3.2 | indirect |
| Packagist | sebastian/exporter | 8.1.1 | indirect |
| Packagist | sebastian/file-filter | 1.0.0 | indirect |
| Packagist | sebastian/git-state | 1.0.0 | indirect |
| Packagist | sebastian/global-state | 9.0.1 | indirect |
| Packagist | sebastian/lines-of-code | 5.0.2 | indirect |
| Packagist | sebastian/object-enumerator | 8.0.0 | indirect |
| Packagist | sebastian/object-reflector | 6.0.0 | indirect |
| Packagist | sebastian/recursion-context | 8.0.1 | indirect |
| Packagist | sebastian/type | 7.0.1 | indirect |
| Packagist | sebastian/version | 7.0.0 | indirect |
| Packagist | staabm/side-effects-detector | 1.0.5 | indirect |
| Packagist | theseer/tokenizer | 2.0.1 | indirect |
Dependency advisories 0
This repository publishes no package the index resolves, so its own dependency graph was assessed — 28 packages, which also include development and test pins that never ship: 0 carry known advisories, of which 0 are direct.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"php",
"user-agent",
"user-agent-parser",
"useragent",
"useragentparser"
],
"is_fork": false,
"size_kb": 476,
"has_wiki": false,
"homepage": "https://hexydec.com/apps/user-agent-parser/",
"languages": {
"PHP": 615319
},
"pushed_at": "2026-08-03T16:27:05Z",
"created_at": "2023-07-20T12:00:53Z",
"owner_type": "User",
"updated_at": "2026-08-03T16:27:09Z",
"description": "A fast and efficient string matching library for extracting information from User-Agent strings",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP"
]
},
"owner": {
"blog": null,
"name": "Will Earp / Hexydec",
"type": "User",
"login": "hexydec",
"company": "SWGfL",
"location": "Exeter, United Kingdom",
"followers": 21,
"avatar_url": "https://avatars.githubusercontent.com/u/743478?v=4",
"created_at": "2011-04-21T09:47:59Z",
"is_verified": null,
"public_repos": 18,
"account_age_days": 5583
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "2.0.3",
"kind": "patch",
"published_at": "2026-04-27T16:05:11Z"
},
{
"tag": "2.0.2",
"kind": "patch",
"published_at": "2025-08-31T20:26:55Z"
},
{
"tag": "2.0.1",
"kind": "patch",
"published_at": "2025-08-25T22:10:17Z"
},
{
"tag": "2.0.0",
"kind": "major",
"published_at": "2025-05-03T20:29:47Z"
},
{
"tag": "1.3.1",
"kind": "patch",
"published_at": "2024-11-22T11:15:26Z"
},
{
"tag": "1.3.0",
"kind": "minor",
"published_at": "2024-10-01T08:56:20Z"
},
{
"tag": "1.2.1",
"kind": "patch",
"published_at": "2024-08-02T16:22:14Z"
},
{
"tag": "1.2.0",
"kind": "minor",
"published_at": "2024-06-27T20:10:12Z"
},
{
"tag": "1.1.0",
"kind": "minor",
"published_at": "2024-04-08T19:06:44Z"
},
{
"tag": "1.0.1",
"kind": "patch",
"published_at": "2024-02-15T18:27:01Z"
},
{
"tag": "1.0.0",
"kind": "major",
"published_at": "2024-01-25T21:24:21Z"
},
{
"tag": "0.6.0",
"kind": "minor",
"published_at": "2024-01-11T13:53:16Z"
},
{
"tag": "0.5.1",
"kind": "patch",
"published_at": "2023-12-18T22:32:58Z"
},
{
"tag": "0.5.0",
"kind": "minor",
"published_at": "2023-11-19T21:59:40Z"
},
{
"tag": "0.4.0",
"kind": "minor",
"published_at": "2023-10-16T22:09:28Z"
},
{
"tag": "0.3.0",
"kind": "minor",
"published_at": "2023-09-14T09:28:20Z"
},
{
"tag": "0.2.0",
"kind": "minor",
"published_at": "2023-08-24T21:27:51Z"
},
{
"tag": "0.1.0",
"kind": "minor",
"published_at": "2023-08-05T19:08:08Z"
}
],
"recent_commits": [
{
"oid": "87a37f3615b8b4cb3dc36f225ba615f0adc09d8c",
"body": "Updated `props::set()` to remove variable confusion.\nFixed bug in `versions::load()` where a boolean was the wrong way round causing stale cache not to work.\nAdded missing docblocks to `versions`.\nRemoved `virtualised` property from mappings in `architectures::get()` as this is not a stored property\n[…]\ne in `crawlers::get()`.\nFixed increment bug in mapping for `KAIOS` where the increment was not pre-incremented, leading to it not reading the next token in `platforms::get()`.\nAdded and updated tests.",
"is_bot": false,
"headline": "Fixed `null` handling issue for PHP8.5.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-08-03T16:26:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "83c4b5e5c36c11b0cf6f9ce208de31b9112d4fc5",
"body": "Fixed browser release dates in tests, as the `versions` project had s…",
"is_bot": false,
"headline": "Merge pull request #14 from hexydec/hotfix/update-browser-dates",
"author_name": "Will Earp / Hexydec",
"author_login": "hexydec",
"committed_at": "2026-05-13T09:47:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22a387ecb91da5d32aa836b6d96c1b9834fe8ff3",
"body": "…ome issues that are now resolved.\n\nUpdated dependencies.",
"is_bot": false,
"headline": "Fixed browser release dates in tests, as the `versions` project had s…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-05-13T09:46:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "244233631cdbaeba2225c730c2b41a8ebe665aed",
"body": null,
"is_bot": false,
"headline": "Added dynamic property attributes.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-05-13T08:15:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a223ec6bb2154ea84a422aa3f4dc9b1012a6974",
"body": "Updated `tests.yml` to upgrade PHP version and improve workflow.",
"is_bot": false,
"headline": "Merge pull request #13 from hexydec/chore/maintenance",
"author_name": "Will Earp / Hexydec",
"author_login": "hexydec",
"committed_at": "2026-05-04T19:43:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "baa1798d3acc107b38b5e10e1698c04620a2e35c",
"body": null,
"is_bot": false,
"headline": "Fixed release date in browser test.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-05-04T19:41:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8efe4d536cc47a6e7413fb4bf5b9cd71f33bf448",
"body": "Fixed PHPstan issues.\nUpdated dependencies.",
"is_bot": false,
"headline": "Updated `tests.yml` to upgrade PHP version and improve workflow.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-05-04T19:37:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca05e53618734e993760515a73f16dc0bc2f52e7",
"body": "Updated dependencies.",
"is_bot": false,
"headline": "Added a PHPStan neon file, added analyse command to `composer.json`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-05-03T17:57:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d8e56d442ee8823788a6c286d4e390911862d7d",
"body": "…it-10.5.62\n\nBump phpunit/phpunit from 10.1.2 to 10.5.62",
"is_bot": false,
"headline": "Merge pull request #11 from hexydec/dependabot/composer/phpunit/phpun…",
"author_name": "Will Earp / Hexydec",
"author_login": "hexydec",
"committed_at": "2026-04-27T15:59:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22ecca2e14aa1bcf9fa625da50b2ad5b5a8f9528",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into dependabot/composer/phpunit/phpunit-10.5.62",
"author_name": "Will Earp / Hexydec",
"author_login": "hexydec",
"committed_at": "2026-04-27T15:58:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b9c353ec81f7921c7d7c34c9f03517ef51e7dbf",
"body": "Fixed issue in `agentzero::__construct()` where the returned type for…",
"is_bot": false,
"headline": "Merge pull request #12 from hexydec/hotfix/tests-failing",
"author_name": "Will Earp / Hexydec",
"author_login": "hexydec",
"committed_at": "2026-04-27T15:55:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae12ce6f23dad0d3ae7697296a696eb3cf663610",
"body": null,
"is_bot": false,
"headline": "Updated PHP version in test runner.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-04-27T15:54:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "199baa7eb96629806f2c0547156747569feb7410",
"body": null,
"is_bot": false,
"headline": "Updated dependencies.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-04-27T15:52:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4128edd2a8d4cda440de6b2802412924536ffa6",
"body": "… version values could be an int, whereas they are stored as strings, they are now converted.\n\nFixed bug in `versions::get()` where if the specified version was out of range of the earliest version we have data for, and the major version was the same, it would incorrect return that it was the latest version. It now checks the string against the earliest version to see if it lower, and if so marks it as `legacy`.\nUpdated tests.",
"is_bot": false,
"headline": "Fixed issue in `agentzero::__construct()` where the returned type for…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-04-27T15:50:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bca8e0318cffcb9559e08199affbba9304400541",
"body": "Fixed a test.\nUpdated dependencies.",
"is_bot": false,
"headline": "Fixed PHPStan issues.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-04-15T08:40:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b7b6ae1d57384d14805c3cdf99ad0b16ee81b78",
"body": null,
"is_bot": false,
"headline": "Added new google agents.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-04-10T16:14:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49f948d92e98e4dca821242d9cd215ab2027ed2e",
"body": "Updated `agentzero::getTokens()` to guard against inputs that are too long.\nUpdated `hints::parse()` to guard against hints that are too long.\nAdded more tests for client hints.",
"is_bot": false,
"headline": "Updated `README.md` with more accurate information.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-03-26T22:27:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6bddcd9bbe34ec9f29e37453ba5f58998bb2726",
"body": "Added new crawler mappings.\nUpdated dependencies.",
"is_bot": false,
"headline": "Fixed strict error in `index.php`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2026-03-23T22:30:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21afbdfdf53012fcfb478bca21825a2bd0e91989",
"body": "Bumps [phpunit/phpunit](https://github.com/sebastianbergmann/phpunit) from 10.1.2 to 10.5.62.\n- [Release notes](https://github.com/sebastianbergmann/phpunit/releases)\n- [Changelog](https://github.com/sebastianbergmann/phpunit/blob/10.5.62/ChangeLog-10.5.md)\n- [Commits](https://github.com/sebastianbe\n[…]\n.2...10.5.62)\n\n---\nupdated-dependencies:\n- dependency-name: phpunit/phpunit\n dependency-version: 10.5.62\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump phpunit/phpunit from 10.1.2 to 10.5.62",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-27T22:50:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bdf51407c939e912c8af13c20b9016e8706b7b34",
"body": "Updated dependencies.",
"is_bot": false,
"headline": "Updated test.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-12-04T22:58:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "335e10a07b0204c4612af15634dbb14467f7f0e8",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of github.com:hexydec/agentzero",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-09-12T20:20:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56572473888a6d77e1449979526ff6414361bb6a",
"body": "Added tests.",
"is_bot": false,
"headline": "Added `node-fetch` as a scraper.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-09-12T20:20:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dc178c445430f0ffca17e5661f32ae0c8584d7b",
"body": "…earliest date for each browser based on the version number supplied.\n\nUpdated tests.",
"is_bot": false,
"headline": "Fixed bugs in `versions::released()` where it didn't always pick the …",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-08-31T20:00:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e03448daea1825634cb92538f05da208d8cbea9a",
"body": "… pass your own headers.",
"is_bot": false,
"headline": "Fix bug in `agentzero::getHints()` where a variable wasn't set if you…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-08-31T18:49:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c41271ce9c7836eeab90bc52b7ac915944b77b2",
"body": "Fixed issue with `Fennec` browser in `browser::getBrowser()` where it could get the version wrong, causing the release date to be incorrect.",
"is_bot": false,
"headline": "Merge branch 'main' of github.com:hexydec/agentzero into main",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-08-20T22:53:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "768cad2c98046dce4f20e45effba5fed4d7b66d6",
"body": "…rom a headers array or from `$_SERVER`.\n\nImproved logic in `versions::get()`.\nAdded some `ClaudeBot` tests.",
"is_bot": false,
"headline": "Updated `agentzero::getHints()` to enable the hints to be extracted f…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-08-20T22:23:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "683f0d0bdfb861ace16cc76f020bedc1a09aff2d",
"body": "Fixed docblock in `hints::parse()`.\nAdded loads of AI bots to `crawlers::get()`.\nAdded and updated tests.\nUpdated dependencies.",
"is_bot": false,
"headline": "Updated class definition in `README.md`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-08-19T21:42:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be92f74c9abe20641250072e5f324431fa727615",
"body": "Added test.\nUpdated dependencies.",
"is_bot": false,
"headline": "Added `StatusCake` monitor.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-07-17T22:01:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2aee39d9b48d0aca859cd1f80d5399ea28c06235",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of github.com:hexydec/agentzero",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-05-29T11:22:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8155a2a33a9aa7b989768d3be7a2d6d448558b0",
"body": "Added tests.",
"is_bot": false,
"headline": "Added support for `fxiOS` (Firefox on Safari).",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-05-29T11:22:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "101de9e2d25cb60a795486bcf494a1b01775f01b",
"body": "Updated tests.",
"is_bot": false,
"headline": "Added URL to `SiteImprove` crawler.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-05-22T21:22:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "657b953c69d0a114f40477d9cbbc698221c36355",
"body": null,
"is_bot": false,
"headline": "Updated `README.md`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-05-11T20:41:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15556517b16944514d026f671722367164c5dcd3",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of github.com:hexydec/agentzero into main",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-05-03T20:03:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02ed3056a75bc4a264dc9bcbe6c1cd5143028b15",
"body": null,
"is_bot": false,
"headline": "Updated test.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-05-03T20:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad6d852ed6b828f49a167345559732a3f9b3cab6",
"body": "Updated dependencies.",
"is_bot": false,
"headline": "Updated `README.md`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-05-01T22:25:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8ebda8246c4ab4a901f065e9c894872eee0d48d",
"body": "…d by the cache file didn't, the cache file wasn't written.\n\nChanged default setting to not specify where the versions cache file is stored, thus version information will not be retrieved unless it is explicitly set.\nUpdated `versions::get()` to handle when the cache file has not been specified.\nFix\n[…]\nn their own sub array.\nAdded `agentzero::getHints()` to retrieve the client hints sent by the browser.\nUpdated `README.md` with information on how to parse client hints and add versioning information.",
"is_bot": false,
"headline": "Fixed bug `versions::load()` where if the cache folder already existe…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-05-01T22:21:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "daa201b4f3cbf96ea638cedd39dbf7f2a650c95d",
"body": "Updated tests.",
"is_bot": false,
"headline": "Improved `Roku` devices parser.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-04-29T10:39:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebaf8d29c633ac4c41703f0ff650c8231a4965f2",
"body": "Improved `weibo` parsing in `apps::get()`.\nImproved `Facebook` app parsing in `apps::get()`.\nMoved device characteristics such as width, height and network type captures to `devices::get()` and added new network type captures.\nAdded new `Vivo Browser` capture to `browsers::get()`.\nAdded `Bluesky` crawler to `crawlers::get()`.\nAdded `Roku` platform specific captures as they have a fixed format in `platforms::get()`.\nAdded tests.",
"is_bot": false,
"headline": "Improved data sanitisation in `agentzero::parse()`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-04-28T22:41:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dd0321755a754b17d9cb053065f71057a046baa",
"body": null,
"is_bot": false,
"headline": "Fix `iOS` parsing issue where the next token may not exist.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-04-26T22:03:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf46682feae1125290d3797b6195803edb7ef5d6",
"body": "…in the input UA string are printable.\n\nChanged `preg_replace()`call for normalising spaces to a `str_replace()`.\nUpdated `index.php` to correctly check when the value could not be parsed.\nUpdated some test strings that had invalid characters in them.",
"is_bot": false,
"headline": "Added check in `agentzero::parse()` to check that all the characters …",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-04-26T21:16:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad28d2b71965ec6456fe10854c3a25a39cfffefb",
"body": "…onto the UA string, allowing the existing parser to process them as it would any other brands. This will ensure that app names and browsers get processed as per the current rules.\n\nAdded Windows 11 detection to `hints::parse()`.\nUpdated `versions::load()` to be able to use a stale cache if the network is not available.\nUpdated tests.",
"is_bot": false,
"headline": "Updated how client hints are parsed to enable brands to be prepended …",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-03-28T17:50:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a01f2b73bd211344e9ea581319cd7b75a87540e",
"body": "… before returning.",
"is_bot": false,
"headline": "Updated `agentzero::parse()` to check whether any parameters were set…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-03-09T21:22:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd1bce1785b1fe756482f0b48bc0e16acc112066",
"body": "… not checked correctly.",
"is_bot": false,
"headline": "Fixed bug in `agentzero::parseDefault()` where the version number was…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-03-06T00:29:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c2c69a0f6b3e70098589f6d22a7378812797c20",
"body": null,
"is_bot": false,
"headline": "Added parsing for `Sec-CH-UA-Full-Version-List` header.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-03-05T22:24:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58d84a5768650ae092473adf5f28cf6bb1e39c8b",
"body": null,
"is_bot": false,
"headline": "Removed debug code.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-03-05T21:38:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6eca29e87191898878ae60da3efa3906449be16",
"body": "Fixed bug in `versions::load()` where it didn't compare the update date correctly.\nAdded tests.",
"is_bot": false,
"headline": "Added ability to parse client hints.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-03-05T21:14:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5139dfe8f2df4a10e4125b4d7c6b3f32798747d4",
"body": "…e is in the past, to get the latest version as of the date specified.\n\nUpdated `versions::get()` to detect when the major version of the browser requested is lower that the oldest version on file, and to mark it `legacy`.\nUpdated tests.",
"is_bot": false,
"headline": "Updated `versions::latest()` to filter the browsers list when the dat…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-02-07T17:06:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5249ef969850c4f4e65f7b572e510d593c73b7f",
"body": "…s, and `legacy` after 5 years.\n\nAdded `vivobrowser`.\nAdded tests.",
"is_bot": false,
"headline": "Updated `versions::get()` to mark browsers as `outdated` after 2 year…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-02-07T10:20:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ce707a107f92762178734761d48a48ee728d9de",
"body": "Reworked `versions` to handle all the operations of browser versions.\nReworked how browser mappings integrate with `versions::get()`.\nUpdated tests.",
"is_bot": false,
"headline": "Updated `agentzero::parse()` to accept a configuration array.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-02-06T23:46:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b74a3db8578be20b2aa6a8b6a60746a143daebe3",
"body": "Fixed tests.",
"is_bot": false,
"headline": "Merge branch 'main' of github.com:hexydec/agentzero into main",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-02-05T23:44:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "995620d964a2934df93dd373652c7e695f150fe3",
"body": "…wser release date, status, and latest build number.\n\nAdded `versions::get()` to retrieve the datasource for the browser versions from the web and cache it.\nUpdated tests to filter the output, as the browser status and current version are not stable, and so cannot be tested.\nUpdated documentation.\nUpdated dependencies.",
"is_bot": false,
"headline": "Added new method `browsers::getVersionInfo()` that determines the bro…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-02-05T23:33:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30660a46b8f841a49d261ef041935c9b00f8ad3c",
"body": null,
"is_bot": false,
"headline": "Added `Barracuda Sentinel`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-02-03T10:58:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ed3b6b0a92b91e8458738350bc287543eb1b292",
"body": null,
"is_bot": false,
"headline": "Added `webz.io` crawler.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-01-07T20:23:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1158adc8c3f4a09bd396906c45fbf4e7abf47116",
"body": "… first item if there are multiple slashes in the name, it now checks the middle value is not numeric to allow it.\n\nImproved parsing of the Yandex app.\nAdded `nexo` as an application.\nAdded some more tablet detection to `categories::get()`.\nAdded some more AI crawlers.\nAdded `Cubot` as a device manufacturer.\nAdded tests.",
"is_bot": false,
"headline": "Updated `apps::get()` to the `appslash` callback where it ignores the…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2025-01-07T13:56:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7c94bb6f4d6f7ad3f5b403aec545d15e6a74128",
"body": "Added `MIUI Browser` to browsers list.\nAdded tests.\nUpdated dependencies.",
"is_bot": false,
"headline": "Added `Douyin` as an app name (Chinese TikTok), fixes #9.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-11-22T11:07:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d9f86045b8d628381fdcf7f66ce45a0e486b4e9",
"body": null,
"is_bot": false,
"headline": "Removed double spaces.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-11-18T16:41:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9d885002d7d3c4e95ad0ef226a765e29014e89a",
"body": null,
"is_bot": false,
"headline": "Added category and type to `libwww-perl` framework.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-11-05T16:13:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3658030c63bfa08274eccef819a88aec2748f408",
"body": "…dle a blank UA string.",
"is_bot": false,
"headline": "Fixed issue calling `agentzero::parseDefault()` where it couldn't han…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-11-04T18:53:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a35a1ed689fbadfeecf2c62ba85d6ac503dcf817",
"body": "…leMash/Instapaper/LG Player/Roblox/nu.nl apps.\n\nAdded more detection for `Android`, `MacOS` and `iOS`.\nMoved `Headless Chrome` detection to `crawlers::get()`.\nFixed `Amazon Kendra` detection.\nAdded `Playstation 3` support.\nAdded support for more `LG` and `Xiaomi` devices.\nImproved `width` and `height` processing to include `density`.\nImproved JSON extraction to include device and platform information.\nAdded better URL detection in `url::get()`.\nAdded tests.",
"is_bot": false,
"headline": "Added support to detect Reddit/Pinterest/MXPlayer/Todoist/Trello/Purp…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-11-04T18:45:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3029f9a70d8efef3b895680c98fc4d822a00c37",
"body": "Updated dependencies.",
"is_bot": false,
"headline": "Fixed some PHPStan recommendations.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-10-01T08:47:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "697da280792dfa325824a9eca94756f0fe18ba71",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of github.com:hexydec/agentzero",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-10-01T08:38:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19ccb5d8c253d4ffbf08891b7e16c3041fdd0575",
"body": null,
"is_bot": false,
"headline": "Added `datadog` as a crawler.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-10-01T08:38:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb33c3a9c0b136ce601fa34ca4718b9a173757db",
"body": "…oop.\n\nUpdated dependencies.",
"is_bot": false,
"headline": "Fixed performance issue in crawlers where a `count()` call was in a l…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-09-30T19:24:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c50189de88efcf38987df6af8108601096ea3390",
"body": "…ra whitespace in `agentzero::parse()`.\n\nReworked how crawler names are parsed to make them more consistent in `crawlers::normaliseAppname()`.\nAdded `libwww-perl` as a framework.\nAdded lots of new crawlers.\nAdded and updated tests.\nUpdated dependencies.",
"is_bot": false,
"headline": "Agent strings are now normalised to remove surrounding quotes and ext…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-09-28T00:21:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b018987e6715ca11b8facd69912d5ebd38f3779d",
"body": null,
"is_bot": false,
"headline": "Updated dependencies.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-09-17T11:34:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41d4664aefd87bc719eb9e3434aaf2d0a97ae4bf",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of github.com:hexydec/agentzero into main",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-09-17T11:33:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1c772a6db7ba91a75762a9b191dc584923cd2d8",
"body": null,
"is_bot": false,
"headline": "Fixed incorrect docblock.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-09-17T11:33:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f23f69006a4ac80be637ecb94c498fff0a440260",
"body": "Added tests.\nUpdated dependencies.",
"is_bot": false,
"headline": "Added OpenAI and Claude bots.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-08-01T17:29:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3892bd737c8f7b3c1ad8a2a6fdaefa936fd10cf",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of github.com:hexydec/agentzero",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-06-20T07:54:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c98a0af42327e35386306f58e4960c0db62a65e5",
"body": "… was encoded with `preg_quote()`, but the delimiter was not supplied.\n\n`AppleWebKit/537.36` is now marked as single as it is sometime preceded by other tokens that get captured together.\nAdded captures for `Baidu` and `MicroMessenger` apps.\nFixed PHPStan issues to level 9.\nAdded tests.",
"is_bot": false,
"headline": "Fixed issue in `agentzero::getTokens()` where the single values array…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-06-20T07:54:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2aaa7e81dd28cbba35e67f3084dd4087c6569f72",
"body": "`Applebot` is now categorised as AI.\nAdded `bytespider` crawler.\nUpdated tests.",
"is_bot": false,
"headline": "Improved how apps are normalised in `crawlers::getApp()`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-06-11T20:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "948b0c8b9d94f0d3905671b4932895d5d3e66d5f",
"body": "Updated tests.\nUpdated dependencies.",
"is_bot": false,
"headline": "Fixed other instances of `architecture => arm`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-05-07T22:00:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aea9da727ddc44f4c4bc1fe398c8e8615cb574c9",
"body": null,
"is_bot": false,
"headline": "\"arm\" is now \"Arm\" in `architectures::get()`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-05-07T21:53:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "390e2748572992dc507617fa5d585d028404400a",
"body": "Fix typo in README.md",
"is_bot": false,
"headline": "Merge pull request #6 from thecrazybob/patch-1",
"author_name": "Will Earp / Hexydec",
"author_login": "hexydec",
"committed_at": "2024-04-15T20:58:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b32091334c55bd9f17477c42283533d4320afada",
"body": null,
"is_bot": false,
"headline": "Fix typo in README.md",
"author_name": "Mohammed Sohail",
"author_login": "thecrazybob",
"committed_at": "2024-04-15T20:55:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3116953f5194b098f182ff13f342bc27b54ca33",
"body": null,
"is_bot": false,
"headline": "Updated `Yahoo! Slurp` parser.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-04-10T21:08:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1999b9230afafe0c77e595dfe63bbf9f8348e591",
"body": "…hem case-insensitive.\n\nAdded loads of new crawlers to `crawlers::get()`.\nAdded `.NET CLR` framework to `frameworks::get()`.\nAdded `special` class to handle difficult captures.\nAdded and updated test.\nUpdated dependencies.",
"is_bot": false,
"headline": "Reworked how tokens are ignored in `agentzero::getTokens()` to make t…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-04-10T20:59:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "607587c2f3eb69237da3b06e25de96562ec31a74",
"body": "Added `PalmOS` and updated Windows captures to ignore PalmOS.\nAdded a new `ai` category, to mark crawlers that are specifically for AI.\nAdded specific mispellings that indicate a web scraper instead of the human it is trying to spoof.\nAdded and updated tests.",
"is_bot": false,
"headline": "Added `Blazer` browser (PalmOS).",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-04-08T19:00:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55ce30baf7da8e44c974afe71fbadcbe588c42fb",
"body": "Moved `Powershell` and `AppleExchangeWebServices` to crawlers, as there is no indication that these are human UA's.\nAdded `Alamofire` as a framework.\nFixed issue in `other::getApp()` where the `app` was expected to exist.\nAdded capture for `iOS` with a space after it.\nAdded and updated tests.",
"is_bot": false,
"headline": "Apps are now not automatically type `human`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-02-19T08:29:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "625e6fca770ac5714b28b4bd9bde2ca2d588c8f2",
"body": null,
"is_bot": false,
"headline": "Fixes issue #5, missing Huawei Browser.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-02-15T18:20:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee1f74ff5d51788a24fa63befb53ec281e2594fb",
"body": "…r generic bot captures.\n\nAdded `Cloudflare` crawlers to capture list.\nAdded tests.",
"is_bot": false,
"headline": "Cleaned up how specific category names and app names are specified fo…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-02-03T20:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bdb06089b3e1a1780de2dd4f99cd3edb328a6a5",
"body": "Fixed failing tests.",
"is_bot": false,
"headline": "Fixed issues parsing `Google-Read-Aloud`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-29T22:09:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc2e53aa365868dde00f151eaa60c8ad0632623d",
"body": null,
"is_bot": false,
"headline": "Normalised spider names.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-28T23:31:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89a6fc11e517da8b76c5d94c51605d7b949d41ed",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of github.com:hexydec/agentzero into main",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-28T22:44:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3e80151645dc30b2f662fed281f26c170538a21",
"body": "…wler names and categories.",
"is_bot": false,
"headline": "Rework `crawlers::getApp()` to contain all the transformations of cra…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-28T22:43:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e972d8c2b2824773931e38e197a4db99200868d3",
"body": "Added tests.",
"is_bot": false,
"headline": "Added `CocCoc` browser.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-28T22:38:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f252016703faeac7148b5ae8e32b6211514f0c7",
"body": "Added tests.",
"is_bot": false,
"headline": "Added crawler patterns.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-26T08:19:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "462ed2bef705ebb3718a4cf513926f74b1a07d61",
"body": null,
"is_bot": false,
"headline": "Updated `README.md` to remove beta flag.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-25T21:10:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bacfe990045ba0623793aff0bed4d56faa92123a",
"body": "… can be profiled.\n\nUpdated `agentzero::parse()` to generate a lowercase copy of the tokens, which is then passed to `props::match()`, this is to prevent the tokens being lowercased for every match that is made.\nAdded `declare(strict_types = 1)` to all test files.",
"is_bot": false,
"headline": "Added `tests/profile.php` to process a load of UA strings so the code…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-25T21:01:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad9cc7f2e52dffe504dab0b8fe75516f430ad583",
"body": "… now going through `apps::getApp()`.\n\nUpdated `other::get()` to normalise app names through `apps::getApp()`.\nMoved capture for `ByteFullLocale/` to `languages::get()`.\nUpdated `crawlers::get()` to improve normalisation of the `Qwant` crawler.\nImproved how `iPhone` is captured for certain app strings.\nUpdated tests.",
"is_bot": false,
"headline": "Updated config in `apps::get()` to unify how app names are processed,…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-25T19:56:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcdb57730465484c155b5e22c22b10450e1b48a9",
"body": "…e runtime that the app was built in.\n\nAdded support for `Weibo` and `WeChat` apps.\nAdded support for `QQ Browser`.\nImproved how `IE` and `Trident` is captured to account for the fact that the `QQ Browser` can be either `Trident` or `WebKit`.\nUpdated `Chromium` detection to set the rendering engine to `WebKit` when the version is less than 28.\nLanguage can now be captured from `language/` or `ByteLocale` tokens.\nAdded and updated tests.",
"is_bot": false,
"headline": "Added new properties `framework` and `frameworkversion` to capture th…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-23T21:01:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "910f4b9eb6ffbc687da5bb25e3a63ba7a7f3887a",
"body": "…misspell it.\n\nAdded `AppleExchangeWebServices`.",
"is_bot": false,
"headline": "Added `Moblie` as an alternative to `Mobile` as some Samsung devices …",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-23T09:19:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6749c088ec01a16b65eb91a33b6cb7fe9fcfb455",
"body": null,
"is_bot": false,
"headline": "Added `PS Vita` and `PSP` support.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-23T09:10:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e95c1596ac4fe574f14ebdcf30c3b17cfe3b1cca",
"body": "Added tests.",
"is_bot": false,
"headline": "Added support for `KaiOS`, `FreeBSD`, `OpenBSD`, and `OpenSUSE`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-22T21:18:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70bcce7a78c79c5f0220494d67d8ab05b2e848b5",
"body": null,
"is_bot": false,
"headline": "Removed unused parameter.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-21T21:46:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "797f0d102e299cb19036528986779677d4d2420f",
"body": "Fixed all PHPStan issues (Level 9).",
"is_bot": false,
"headline": "Added some better styling to the testing interface.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-21T21:13:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "151935826209116b618685c608267e6d450d1f8b",
"body": "…different token most of the time, it now extracts that value, and falls back to the version specified in the `safari/xxx` token.\n\nUpdated `phpunit.xml` to take the whole tests directory rather than specifying each file.\nUpdated dependencies.",
"is_bot": false,
"headline": "Fixed issue #4 where the browser version of `Safari` is defined in a …",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-11T09:59:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa30e1deb1c0b8b4658f4c0e3df460cc75085e47",
"body": "… extract the original app name, so there is a new property `agentzero::$appname`.\n\nThe `app` property will now be more normalised and human readable, whereas `appname` will contain the original app name.\nUpdated tests.\nUpdated documentation.",
"is_bot": false,
"headline": "Fixes #2 where the app name was normalised, but it may be required to…",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2024-01-11T00:29:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b3ef00650967efc7cbbc44d99ac6bc8873756da",
"body": null,
"is_bot": false,
"headline": "`require` is now called as a keyword in `autoload.php`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2023-12-22T11:14:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3c11e4b31134a9e6e9e82d21b82e1fd9f604e55",
"body": "Updated dependencies.",
"is_bot": false,
"headline": "Updated example in `README.md`.",
"author_name": "Hexydec",
"author_login": "hexydec",
"committed_at": "2023-12-18T22:21:52Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 18,
"commits_last_year": 26,
"latest_release_at": "2026-04-27T16:05:11Z",
"latest_release_tag": "2.0.3",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 11,
"days_since_latest_release": 98,
"mean_days_between_releases": 89.1
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "hexydec/agentzero",
"path": "composer.json",
"tokens": [
"composer.type:library"
],
"ecosystem": "packagist"
}
]
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [
"github.com",
"shields.io"
],
"total": 2,
"header": 2,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "hexydec/agentzero",
"exists": true,
"license": "MIT",
"keywords": [
"php",
"browser",
"user-agents"
],
"ecosystem": "packagist",
"categories": [],
"matches_repo": true,
"registry_url": "https://packagist.org/packages/hexydec/agentzero",
"declared_type": "library",
"is_deprecated": false,
"latest_version": "2.0.3",
"repository_url": "https://github.com/hexydec/agentzero",
"versions_count": 18,
"total_downloads": 134453,
"dependents_count": 1,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 6581,
"first_published_at": null,
"latest_published_at": "2026-04-27T15:59:03Z",
"latest_version_yanked": null,
"days_since_latest_publish": 98
}
]
},
"popularity": {
"forks": 1,
"stars": 40,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2026-02-16",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 83372,
"source_files_sampled": 37,
"oversized_source_files": 4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 28,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"packagist"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "myclabs/deep-copy",
"direct": false,
"version": "1.13.4",
"ecosystem": "packagist"
},
{
"name": "nikic/php-parser",
"direct": false,
"version": "5.8.0",
"ecosystem": "packagist"
},
{
"name": "phar-io/manifest",
"direct": false,
"version": "2.0.4",
"ecosystem": "packagist"
},
{
"name": "phar-io/version",
"direct": false,
"version": "3.2.1",
"ecosystem": "packagist"
},
{
"name": "phpstan/phpstan",
"direct": false,
"version": "2.2.7",
"ecosystem": "packagist"
},
{
"name": "phpunit/php-code-coverage",
"direct": false,
"version": "14.2.4",
"ecosystem": "packagist"
},
{
"name": "phpunit/php-file-iterator",
"direct": false,
"version": "7.0.0",
"ecosystem": "packagist"
},
{
"name": "phpunit/php-invoker",
"direct": false,
"version": "7.0.0",
"ecosystem": "packagist"
},
{
"name": "phpunit/php-text-template",
"direct": false,
"version": "6.0.0",
"ecosystem": "packagist"
},
{
"name": "phpunit/php-timer",
"direct": false,
"version": "9.0.0",
"ecosystem": "packagist"
},
{
"name": "phpunit/phpunit",
"direct": false,
"version": "13.2.6",
"ecosystem": "packagist"
},
{
"name": "sebastian/cli-parser",
"direct": false,
"version": "5.0.1",
"ecosystem": "packagist"
},
{
"name": "sebastian/comparator",
"direct": false,
"version": "8.3.0",
"ecosystem": "packagist"
},
{
"name": "sebastian/complexity",
"direct": false,
"version": "6.0.0",
"ecosystem": "packagist"
},
{
"name": "sebastian/diff",
"direct": false,
"version": "9.0.0",
"ecosystem": "packagist"
},
{
"name": "sebastian/environment",
"direct": false,
"version": "9.3.2",
"ecosystem": "packagist"
},
{
"name": "sebastian/exporter",
"direct": false,
"version": "8.1.1",
"ecosystem": "packagist"
},
{
"name": "sebastian/file-filter",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "sebastian/git-state",
"direct": false,
"version": "1.0.0",
"ecosystem": "packagist"
},
{
"name": "sebastian/global-state",
"direct": false,
"version": "9.0.1",
"ecosystem": "packagist"
},
{
"name": "sebastian/lines-of-code",
"direct": false,
"version": "5.0.2",
"ecosystem": "packagist"
},
{
"name": "sebastian/object-enumerator",
"direct": false,
"version": "8.0.0",
"ecosystem": "packagist"
},
{
"name": "sebastian/object-reflector",
"direct": false,
"version": "6.0.0",
"ecosystem": "packagist"
},
{
"name": "sebastian/recursion-context",
"direct": false,
"version": "8.0.1",
"ecosystem": "packagist"
},
{
"name": "sebastian/type",
"direct": false,
"version": "7.0.1",
"ecosystem": "packagist"
},
{
"name": "sebastian/version",
"direct": false,
"version": "7.0.0",
"ecosystem": "packagist"
},
{
"name": "staabm/side-effects-detector",
"direct": false,
"version": "1.0.5",
"ecosystem": "packagist"
},
{
"name": "theseer/tokenizer",
"direct": false,
"version": "2.0.1",
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 28,
"direct_count": 0,
"indirect_count": 28
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 5,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 8,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "hexydec",
"commits": 163,
"avatar_url": "https://avatars.githubusercontent.com/u/743478?v=4"
},
{
"type": "User",
"login": "thecrazybob",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/20065018?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.994
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"tests.yml"
],
"has_docs_dir": true,
"linter_configs": [
"phpstan.neon"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"composer.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/21 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 3,
"reason": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "87a37f3615b8b4cb3dc36f225ba615f0adc09d8c",
"ran_at": "2026-08-03T16:31:34Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 0,
"decided_7d": 0,
"merged_30d": 0,
"authors_30d": 0,
"decided_30d": 0,
"sample_size": 6,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 0,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-08-03T16:27:41Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-05-13T09:47:46Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/hexydec/agentzero",
"host": "github.com",
"name": "agentzero",
"owner": "hexydec"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 61 is calibrated to 67 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 61,
"calibrated": 67,
"calibration": "2026-08-02"
}
}
],
"value": 67,
"inputs": {
"security": 55,
"vitality": 69,
"community": 42,
"governance": 56,
"calibration": "2026-08-02",
"engineering": 86,
"ai_readiness": 39,
"weighted_overall_raw": 61
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 69,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"commits_last_year": 26,
"human_commit_share": 0.99,
"days_since_last_push": 0,
"active_weeks_last_year": 11
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "11/52 weeks with commits",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 11
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "26 commits in the last year",
"points": 12.9,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 26
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 82,
"inputs": {
"releases_count": 18,
"latest_release_tag": "2.0.3",
"releases_from_tags": false,
"days_since_latest_release": 98,
"mean_days_between_releases": 89.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "18 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 18
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 98 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 98
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~89.1 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 89.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 1,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 1 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 1
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 42,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 28,
"inputs": {
"forks": 1,
"stars": 40,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "40 stars",
"points": 25.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 40
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 2,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [
"github.com",
"shields.io"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"packages": [
"hexydec/agentzero"
],
"dependents": 1,
"ecosystems": "packagist",
"total_downloads": 134453,
"monthly_downloads": 6581
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "6,581 downloads/month across packagist",
"points": 50.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 6581,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "1 packages depend on it",
"points": 2,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 1
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 56,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.994
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 77,
"inputs": {
"merged_prs": 5,
"open_issues": 0,
"closed_issues": 8,
"prs_merged_7d": 0,
"prs_decided_7d": 0,
"prs_merged_30d": 0,
"prs_decided_30d": 0,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 1,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "5/6 decided PRs merged",
"points": 25,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 5,
"decided": 6
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/21 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"followers": 21,
"owner_type": "User",
"is_verified": null,
"owner_login": "hexydec",
"public_repos": 18,
"account_age_days": 5583
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "21 followers of hexydec",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 21,
"login": "hexydec"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "18 public repos, account ~15 yr old",
"points": 21.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 18
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"hexydec/agentzero"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 98
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 98 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 98
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "18 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 18
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "phpstan.neon",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpstan.neon"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"php",
"user-agent",
"user-agent-parser",
"useragent",
"useragentparser"
],
"has_wiki": false,
"homepage": "https://hexydec.com/apps/user-agent-parser/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://hexydec.com/apps/user-agent-parser/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "5 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 5
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 55,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/21 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "4 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 3",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 28 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 28
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 28,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 28,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 39,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 19,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.354,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "35 of 99 human commits state their intent (structured subject or explanatory body)",
"points": 18.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 35,
"sampled": 99
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"composer.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.01
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "phpstan.neon",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "phpstan.neon"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "1 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "weak",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 49,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 83372,
"source_files_sampled": 37,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/37 source files over 60KB",
"points": 49.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 37,
"oversized": 4
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 24
},
"primary": "library",
"evidence": [
{
"tier": "declared",
"label": "library",
"source": "composer.type:library",
"weight": 10
},
{
"tier": "distribution",
"label": "library",
"source": "registry:packagist",
"weight": 6
},
{
"tier": "distribution",
"label": "library",
"source": "registry_type:library",
"weight": 6
},
{
"tier": "description",
"label": "library",
"source": "description:library",
"weight": 2
}
],
"artifacts": [
{
"path": "composer.json",
"labels": [
"library"
],
"ecosystem": "packagist"
}
],
"confidence": "high",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-08-03T16:31:43.593123Z",
"schema_version": "0.30.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/h/hexydec/agentzero.svg",
"full_name": "hexydec/agentzero",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.30.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Packagist.