IronFix is a robust and efficient Rust-based implementation of the Financial Information eXchange (FIX) protocol, designed for secure and high-performance financial messaging.
joaquinbejar/IronFix holds a health index of 60 out of 100, placing it in the Moderate band. It scores highest on Vitality (78/100) and lowest on Community & Adoption (40/100). It was last updated 1 day ago. A single contributor accounts for most of its recent work.
60
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
60
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
deps.dev does not index crates:ironfix-core@0.4.0; advisories assessed against the repository dependency graph instead
No resolved dependencies carried a version and a supported ecosystem
More detail
Star and fork history 0 ★ / 5 ⇿
0Stars
5Forks
2Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 2
Each point covers 2 days.
OpenSSF Scorecard 4.4 / 10
4.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-23 16:43 UTC
Full resolved dependency set from the GitHub dependency graph: 3 direct and 1 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
crates.io
proc-macro2
—
direct
crates.io
quote
—
direct
crates.io
syn
—
direct
crates.io
tracing-subscriber
—
indirect
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 785,
"has_wiki": true,
"homepage": null,
"languages": {
"Rust": 1483165,
"Makefile": 15958,
"Dockerfile": 17123
},
"pushed_at": "2026-07-22T15:00:23Z",
"created_at": "2024-04-28T05:13:34Z",
"owner_type": "User",
"updated_at": "2026-07-22T14:50:38Z",
"description": "IronFix is a robust and efficient Rust-based implementation of the Financial Information eXchange (FIX) protocol, designed for secure and high-performance financial messaging.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "https://t.me/joaquin_bejar",
"name": "Joaquin Bejar Garcia",
"type": "User",
"login": "joaquinbejar",
"company": "Capital Delta",
"location": "London",
"followers": 289,
"avatar_url": "https://avatars.githubusercontent.com/u/99006095?v=4",
"created_at": "2022-02-04T06:46:24Z",
"is_verified": null,
"public_repos": 84,
"account_age_days": 1630
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-22T15:00:32Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-07-21T11:27:44Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-14T13:59:05Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-12T18:56:19Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2026-01-27T16:41:29Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-01-27T14:27:20Z"
}
],
"recent_commits": [
{
"oid": "af59accf42b37443007bfa30f3ef1ec22d16cad9",
"body": "…(Closes #51, #52) (#54)\n\n* fix(fast): let the nullable signed codec represent i64::MAX (#51)\n\nThe nullable signed codec biases the non-negative half by one, so Some(i64::MAX)\nbiased to 2^63, which the i64 encoder rejected and the i64 decoder could not\nrepresent: the domain was i64::MIN..=i64::MAX-1\n[…]\nep 7 no longer claims step 5 (HeartBtInt, a body\n field) enforces the standard-header contract, and states the positional 34\n read runs before identity, with the too-low/gap validation at this step.",
"is_bot": false,
"headline": "fix: nullable signed i64::MAX and positional initiator ack MsgSeqNum …",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T14:49:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "99cc029684da540ba4cc27a66edc8c24e09b8614",
"body": "* fix(core): bound is_user_defined to the 5000-9999 range (#49)\n\nFieldTag::is_user_defined returned true for any tag >= 5000, so an assigned\nExtension Pack tag (40000+) was misclassified as user-defined. The FIX\nbilateral user-defined range is exactly 5000-9999; tags at or above 10000,\nincluding the\n[…]\nndent of the encoder and\n of the byte-count ceiling.\n- ironfix-fast crate docs no longer claim Some(u64::MAX) is refused; they state\n the nullable unsigned codec covers the full 0..=u64::MAX domain.",
"is_bot": false,
"headline": "fix: three conformance-edge fixes (Closes #48, #49, #50) (#53)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T13:02:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed355a040f4e47cf29da63a659e15dd6d9626e79",
"body": "…rminal (#47)\n\nSquashed for merge: adds Acceptor<A> driving the session acceptor typestate\nover the shared reactor, plus EngineBuilder terminal methods, with the review\nhardening to match the Initiator handshake.",
"is_bot": false,
"headline": "feat(engine): implement the Acceptor and give EngineBuilder a real te…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T10:02:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9907f904ee330e171f9f9718ee2824b342241f98",
"body": "…Ds (#46)\n\nSquashed for merge: bounds resend recovery, validates SendingTime, places\nCompIDs correctly, and keeps resend state in sync so a partial fill cannot\nsilently stall.",
"is_bot": false,
"headline": "fix(engine): bound resend recovery, validate SendingTime, place CompI…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T09:33:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5003bcef0b17a03c8076b7cb21bd553f3ca8fefe",
"body": "…#45)\n\nSquashed for merge: corrects the protocol errors across the per-version\nclient/server example pairs so they are usable templates.",
"is_bot": false,
"headline": "fix(examples): make the examples correct templates, not broken ones (…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T09:08:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7907efec8398e902b6f6223c4a070dc567a05a07",
"body": "…anic (#43)\n\nSquashed for merge: implements the FixMessage/FixField derives and the\nDictionary code generator, with the review hardening (bounded descent,\nidentifier validation, duplicate-key and char/empty-value paths).",
"is_bot": false,
"headline": "fix(derive,codegen): implement the macros instead of expanding to a p…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T09:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35de7ee0a23179c38b4d311b5e0ece7884cc448e",
"body": "* fix(fast): correct presence-map semantics per operator\n\nrequires_pmap answered with a single boolean per operator, which cannot be\nright: under FAST 1.1 several operators take a presence-map bit only when the\nfield is optional, so one boolean was always a half-truth. It takes the field's\noptionali\n[…]\nthe zero-suffix rule. The encoded-size\nceiling still bounds a hostile map, which is a separate concern from the\nsuffix. The test that asserted the old exhaustion behaviour now asserts the\nzero-suffix.",
"is_bot": false,
"headline": "fix(fast): correct presence-map semantics per operator (#40)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T08:55:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "31154d695c19ff9693174954fc333702e7bbe747",
"body": "…e (#44)\n\nSquashed for merge: the outbound send path, the Application callback ordering,\nand the hardening from review's second pass.",
"is_bot": false,
"headline": "fix(engine): make the outbound and callback paths do what they promis…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T08:53:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4199e344ce1a26dcbee70e72883763f3632a5dc8",
"body": "…erything (#42)\n\nSquashed for merge: wires MessageStore into the Initiator so an inbound\nResendRequest replays stored application messages (PossDupFlag + OrigSendingTime)\nand gap-fills admin messages and evicted sequence numbers, with the whole-range\ngap fill as the no-store fallback. Includes the sequence-integrity review fixes.",
"is_bot": false,
"headline": "feat(store): replay messages from the store instead of gap-filling ev…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T08:05:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fc584ea2a4d381a227edf58b2416a07f508a943",
"body": "…it (#41)\n\n* fix(session): validate session configuration instead of panicking on it\n\nSessionConfigBuilder used expect(), so bad input panicked a library -- under\npanic = abort, that takes the caller's process with it -- and otherwise\nvalidated nothing at all. Every knob now has a typed field with a\n[…]\n were configured and validated\nbut never emitted, a silent misconfiguration for a user who set routing IDs. The\nstandard-header builder now stamps them after the sender/target sub-IDs when\nconfigured.",
"is_bot": false,
"headline": "fix(session): validate session configuration instead of panicking on …",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:50:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a0f69872ad454074d1dc338e896059b902fc1cd3",
"body": "Merging the stack surfaced three target-level breakages that a library-only\nbuild did not catch:\n\n- The wrong-version Logon-ack test still called Encoder::finish() as if it\n returned a byte slice; it now returns Result<&[u8], EncodeError>, so the\n test matches on it.\n- Both criterion benches preda\n[…]\nhem is the dictionary Validator's job, not the codec's. The\n test now rejects only non-printable/non-ASCII codes and pins the acceptance\n of space and '=' so the decision cannot silently flip again.",
"is_bot": false,
"headline": "fix: repair test and bench targets after the encoder API shift",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:49:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7fb5db966798c88529db633652539fb9ff144686",
"body": "…#39)\n\n* fix(dictionary): make the schema the authority it is supposed to be\n\nThe validator exists to be the authority on message structure, and it was\naccepting messages whose structure did not match the schema. Repeating groups\nwhose count or delimiter disagreed with the definition validated clean\n[…]\ne validator's fractional-second cap rejected legal 12-digit picosecond\nUTCTimestamps that FIX 5.0 SP2 permits -- the dictionary wrongly overruling the\nspec -- so the cap is raised from 9 to 12 digits.",
"is_bot": false,
"headline": "fix(dictionary): make the schema the authority it is supposed to be (…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:37:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "afb6297bfaf743efbf9947b0ac0abc040dce969c",
"body": "…X 4.4 (#38)\n\nA FIX DATA field is a counted byte string whose content may legally contain\nSOH and '=', so the decoder frames it by the count its paired LENGTH field\ndeclares. The pair table covered FIX 4.4 only -- 16 pairs -- while the crate\nadvertises 4.0 through 5.0 SP2, so any DATA field introduc\n[…]\nnything an Extension Pack adds after 5.0 SP2. Both are documented rather\nthan left to be discovered.\n\nThe encoder's put_data validates against the same table, so the new pairs work\nin both directions.",
"is_bot": false,
"headline": "fix(tagvalue): frame every spec-defined Length/Data pair, not just FI…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:36:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "234500a544b9ae013223decdb18f66fe8a15b002",
"body": "* fix(session): stop the heartbeat logic from killing live sessions\n\nTwo of these were reproduced against a running session, not inferred.\n\nHeartBtInt = 0 is legal FIX and means do not send heartbeats. It was taken\nliterally as a zero-length interval, so should_send_heartbeat was permanently\ntrue an\n[…]\nis now asserted at construction\n(zero elapsed, unreachable by any realistic stall) and only the 'due' side\nsleeps -- which is robust, since a longer-than-requested sleep still lands past\nthe boundary.",
"is_bot": false,
"headline": "fix(session): stop the heartbeat logic from killing live sessions (#37)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:35:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "84895907490b1e9831ba48f692d0d1637754f3cd",
"body": "… accepts (#36)\n\n* fix(tagvalue): make every frame the encoder emits one its own decoder accepts\n\nThe encoder wrote application values raw, so a string containing SOH or '='\ninjected fields into its own message -- the mirror of the decoder-side\ninjection already closed. Illegal bytes are now refused\n[…]\npty value.\n\nA caller-facing rejection (an Err back through Connection::send) would need a\noneshot on the fire-and-forget send channel, which is a Connection API change\nleft for the outbound-path work.",
"is_bot": false,
"headline": "fix(tagvalue): make every frame the encoder emits one its own decoder…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:35:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c2e16444f833312b987f063724066c6ec6488f7",
"body": "…ess (#35)\n\n* ci: make the gates fail when they should, and stand up the bench harness\n\nformat_check ran the mutating format target instead of a check, so it\nrewrote the files and reported success -- the gate could never fail.\n\npublish-all suppressed every error with '|| true', so it reported succes\n[…]\nefore finish(), so it is narrowed to what the bench\nmeasures.\n\nAdds doc/adr/0001 recording the criterion dev-dependency decision -- the repo\nhad no ADR directory and this is the first ADR-worthy call.",
"is_bot": false,
"headline": "ci: make the gates fail when they should, and stand up the bench harn…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:33:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be83d71cb0ae00e2aac6a247846b777f4d8706cb",
"body": "* docs: make the documentation describe the code that exists\n\nThe README's quick start called EngineBuilder::build(), which has never\nexisted, so the first thing a reader tried did not compile. It also advertised\nTLS, a FileStore, broad out-of-the-box version support and a complete facade,\nnone of w\n[…]\num sketch flagged in review is left as is: architecture.md is\nan explicitly-labelled design target whose code is illustrative and mostly does\nnot compile, and that unsafe is already disclaimed inline.",
"is_bot": false,
"headline": "docs: make the documentation describe the code that exists (#33)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:31:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a804306d42a5006a59dc619075b762d71fc1bc3",
"body": "…rsion hoist\n\nThe #28 version hoist made begin_string a method on the shared FixVersion,\nbut #9's BeginString mismatch check indexed it as a struct field. Both were\ntextually clean on merge yet semantically incompatible, breaking the build.\nThe two call sites in the Logon-ack check now invoke the method.",
"is_bot": false,
"headline": "fix(engine): call FixVersion::begin_string() as a method after the ve…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:29:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14ef48f2459e1899d1973feef8bac582863f55d4",
"body": "The map from a configured FIX version to its wire form -- BeginString, and\nApplVerID for the 5.0 family -- existed in two places: ironfix-dictionary's\nschema::Version, and a pub(crate) table added to ironfix-engine when FIXT.1.1\nsupport landed. The duplication was deliberate, because ironfix-engine \n[…]\nversion but no application version for the required DefaultApplVerID -- rather\nthan guessing one onto the wire.\n\nThe crate DAG is unchanged: ironfix-engine still does not depend on\nironfix-dictionary.",
"is_bot": false,
"headline": "refactor(core): give the FIX version mapping a single home (#34)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:26:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62206df6a598cfa4d4bc46ea566394dc0d13dcf2",
"body": "* perf(core): make an unrecognised MsgType allocation-free\n\nMsgType::from_str ended in Custom(other.to_string()), so any tag 35 value the\nenum does not name heap-allocated once per message on the decode success path\n-- the path that is supposed to allocate nothing. A counterparty sending a\nvendor-sp\n[…]\nh are accepted now, while SOH, other control bytes and non-ASCII stay\nrejected. A decoder test that asserted the old '=' rejection is updated to\nassert 35=A=B decodes to Custom(\"A=B\") and round-trips.",
"is_bot": false,
"headline": "perf(core): make an unrecognised MsgType allocation-free (#32)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:25:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "318e3bc33bed6acdce36dbf528fd28ce00b71852",
"body": "…loss (#31)\n\n* fix(core): harden the shared vocabulary against injection and silent loss\n\nCompId checked only length, and the engine writes CompIds unescaped into tags\n49 and 56 on every outbound message -- so a hostile identifier injected header\nfields or corrupted framing. The constructor now reje\n[…]\nates a field and only the\nfirst '=' separates tag from value -- so a valid counterparty identifier\ncontaining '=' was refused. The '=' check is removed; SOH and non-printable\nbytes are still rejected.",
"is_bot": false,
"headline": "fix(core): harden the shared vocabulary against injection and silent …",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:24:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2929dae71c2a8ff27737eb079ecc0dac04fa44a8",
"body": "… (#30)\n\n* fix(fast): correct the stop-bit primitives and bound the presence map\n\nThe signed encoder never emitted the sign-carry byte, so every value whose\nmost significant payload byte conflicted with the sign round-tripped to a\ndifferent number: 64 decoded as -64, 127 as -1, i64::MAX as -1, i64::\n[…]\nto what the code guarantees and the resolution is\npointed at the template work in #13. The ceiling's scope is stated too: it\nbounds decode, not from_bits or the builder, whose output encode() refuses.",
"is_bot": false,
"headline": "fix(fast): correct the stop-bit primitives and bound the presence map…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:23:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "83613e69fc1087c0cd1d5b06125a6f121a648162",
"body": "* fix(engine): make inbound session handling conform to the FIX spec\n\nEight defects in the Initiator's inbound path, all reachable from a\ncounterparty.\n\nSequenceReset conflated GapFill with Reset. Only Reset mode may ignore\nMsgSeqNum; a GapFill participates in normal sequencing, so a gapped fill now\n[…]\nn consuming an in-sequence fill, on the malformed-flag reason,\nand on the engine declaring but not using a store; the outbound EndSeqNo=0\nsentinel's 4.0/4.1 caveat is documented as a known limitation.",
"is_bot": false,
"headline": "fix(engine): make inbound session handling conform to the FIX spec (#25)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-22T07:19:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cb1eb9638f002e5735c0c2f7d8de06bc988a496c",
"body": "…ssage recovery (#24)\n\n* chore: bump workspace to 0.4.0\n\nThe P0 audit fixes require breaking public API changes (fallible\nconstructors, new error variants on enums that are not #[non_exhaustive],\ndeprecations). For a 0.x crate the breaking bump is the minor position, and\nsemver.yml runs cargo-semver\n[…]\nnds the buffer's length, not its resident cost, and that\ntokio_util::Framed terminates its stream after any decoder error -- so the\nresync is reachable only by a caller that drives the codec directly.",
"is_bot": false,
"headline": "fix(transport): verify framing, bound buffering and define garbled-me…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-21T17:50:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e565c29548fded9174d27b65acf8c3ef6c1f52ad",
"body": "…ut (#23)\n\n* chore: bump workspace to 0.4.0\n\nThe P0 audit fixes require breaking public API changes (fallible\nconstructors, new error variants on enums that are not #[non_exhaustive],\ndeprecations). For a 0.x crate the breaking bump is the minor position, and\nsemver.yml runs cargo-semver-checks agai\n[…]\nagainst the FIX 4.4 DATA field set so the two cannot drift.\n\nAlso corrects the checksum comment, which claimed 16.8 MB was reachable for a\nframed message when the transport caps frames far below that.",
"is_bot": false,
"headline": "fix(tagvalue): harden the tag=value decode path against untrusted inp…",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-21T17:49:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1110a14a020b34883df4ca1385a7ed9d0aeaba8b",
"body": "Three sibling unchecked-arithmetic sites were reachable from raw framing\nbytes and panicked under overflow-checks (or wrapped silently in release):\n\n- ironfix-tagvalue/src/decoder.rs: `body_start + body_length` used the\n fully attacker-controlled BodyLength(9). Now `checked_add`, plus a\n declared-\n[…]\nyLength that does not match\nthe actual body. The dictionary validator test fixtures declared a dummy\n`9=100`, so the test helper now computes the real length.\n\nBumps the workspace to 0.3.1.\n\nCloses #4",
"is_bot": false,
"headline": "fix: bound attacker-controlled BodyLength and CheckSum arithmetic (#5)",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2026-07-21T11:20:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2099810441f4aef5e83e037ad89cc7b64c9a1f1c",
"body": "tokio 1.52, bytes 1.12, smallvec 1.15, memchr 2.8, rust_decimal 1.42,\nquick-xml 0.41; add futures-util for the engine reactor's Stream/Sink\ncombinators. Adapt the dictionary loader to quick-xml 0.41, which\nreplaces unescape_value with normalized_value(XmlVersion).\n\nMinor (0.x-major) bump: ironfix-engine grows the Initiator public API\nand the workspace dependency floors move.",
"is_bot": false,
"headline": "Update dependencies to latest stable and bump workspace to 0.3.0",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-14T13:57:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8e09dd4128dd97630c24977293c45445f18a445",
"body": "Dial + FixCodec framing + Logon handshake driven through the\nironfix-session typestates, with a background reactor task owning the\nsocket: heartbeats/TestRequests with timeout detection, sequence\nvalidation (ResendRequest on gap, GapFill reply to resends, PossDup\nhandling), Application callback disp\n[…]\nion, per-connection reactors) is not cheap to bolt on here.\n\nFix the fix44_server example to send incrementing MsgSeqNum: a\nsequence-correct initiator rejects its hardcoded 34=1 as too-low.\n\nCloses #3",
"is_bot": false,
"headline": "Add Initiator to ironfix-engine: TCP dial, reactor, session runner",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-14T13:57:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32f5e5cf20ca3a24f456952e67ea7af26bd5b7f4",
"body": "ironfix-dictionary now has a dev-dependency on ironfix-tagvalue, so the\nold order fails to resolve during publish verification.",
"is_bot": false,
"headline": "Publish ironfix-tagvalue before ironfix-dictionary in publish-all",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:56:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb0a67630cc12844dcb980286f2d60805640fe6b",
"body": "Minor (0.x-major) bump: ironfix-dictionary adds public fields to the\nexhaustive Dictionary and GroupDef structs, which is a breaking change\nfor downstream struct construction.",
"is_bot": false,
"headline": "Bump crate versions to 0.2.0 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:48:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d19c92bd18fff8fa2eb6602ec70cfdcecd6d1dc",
"body": "…idator\n\nVendor the QuickFIX FIX44.xml specification and embed it behind\nDictionary::fix44(), parsed once and cached for the process lifetime.\nAdd Dictionary::from_quickfix_xml() so venue-specific dialects can be\nloaded from QuickFIX-format XML. Add Validator, which checks a decoded\nRawMessage again\n[…]\nonent expansion), enum values, and repeating group\ncount/delimiter consistency. Extend the schema with group component\nreferences and header/trailer groups, which FIX 4.4 requires (NoHops).\n\nCloses #2",
"is_bot": false,
"headline": "Add embedded FIX 4.4 dictionary, QuickFIX XML loader, and message val…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:48:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "94b8edd7e29133a2b9065d61e66519900653be80",
"body": "Add LogonReceived state with accept_logon/reject_logon/on_timeout\ntransitions plus Disconnected::accept and Connecting::on_logon_received,\nso a FIX acceptor (server) can express its state machine with the\nprovided typestate. Add try_allocate_sender_seq and\ntry_increment_target_seq returning Result<SeqNum, SequenceExhausted> so\nsequence exhaustion is an explicit error instead of silent u64\nwraparound; document the reset semantics. Export Session and the new\ntypes from the crate root.\n\nCloses #1",
"is_bot": false,
"headline": "Add acceptor-side session typestates and checked sequence counters",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-07-12T18:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ac17a37f7c4efbdfe97a06f428809733d88b66b",
"body": "…e badge",
"is_bot": false,
"headline": "Update badges in README to reflect \"ironfix-core\" and simplify licens…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:56:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e13dfdc6e7dee43e42e913c738fd75c3d7fa019",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.6 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c84846e04d3c172d16a10cb366ce58f82c99a4aa",
"body": "…ility",
"is_bot": false,
"headline": "Refactor code style and ordering in example files for improved readab…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53ae4abe5e8b108949521da83f1b544bc021be33",
"body": "… FAST protocol server and client examples. Bump crate versions to 0.1.5.",
"is_bot": false,
"headline": "Add Dockerfiles for FIX protocol versions (FIX40 to FIX50SP2) and new…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T16:29:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7ef7433512008faa99b3727684fe92448cbb2df",
"body": null,
"is_bot": false,
"headline": "Enhance semver workflow to include checks for all ironfix crates",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:22:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3336fad9dea0eb0636636674809c70ac84e3cd5",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.4 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:18:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4a44a0b645d9803546c31f66db6dfa7399b2123",
"body": "…value\" modules across examples and documentation",
"is_bot": false,
"headline": "Update crate imports to match renamed \"ironfix_core\" and \"ironfix_tag…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:18:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98f3f916442566fb273ca92ef47fd1772cb0eef8",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.3 in Cargo.toml",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:09:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b4329da5480707175bf7acf8216bfda966ce048",
"body": "…ences across the repository.",
"is_bot": false,
"headline": "Rename crate from \"ironfix\" to \"ironfix-example\" and update all refer…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T14:09:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4545dd5573e77d91ead3648bafb3d6836ab58aea",
"body": null,
"is_bot": false,
"headline": "Bump crate versions to 0.1.2 and allow non_snake_case in `lib.rs`.",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5773698741ada37fa00a14bb0248466c2609c092",
"body": "…y` from the publishing workflow in Makefile",
"is_bot": false,
"headline": "Update crate name to \"IronFix\" in Cargo.toml and remove `--allow-dirt…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:52:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b67041f0a9166940f9b2781be2262c9b4f4570d6",
"body": null,
"is_bot": false,
"headline": "Add version update target to Makefile and bump crate versions to 0.1.1",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:38:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd279a97026be4713b5b598803cb42b9bbbd97e2",
"body": null,
"is_bot": false,
"headline": "Remove all example files and shared utilities from the repository",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T13:33:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea6cbfd8d4a973d298e22bfde83207e237f70643",
"body": null,
"is_bot": false,
"headline": "Add dependency versions and enhance publishing workflow in Makefile",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T12:49:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ed5ddbefadb50db5e2941b9ca6c3b775fd114af",
"body": "…port examples",
"is_bot": false,
"headline": "Add `ironfix-transport` crate with FIX codec implementation and trans…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T12:44:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d37b8cdd3eb396b4c70f6927965b108d505bff5",
"body": null,
"is_bot": false,
"headline": "Add license information to README",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:03:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85653b7ab89a234a7d1e169e888534153ae08ea0",
"body": "…ry, etc.)",
"is_bot": false,
"headline": "Add metadata to `Cargo.toml` (authors, description, license, reposito…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:03:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b3d7b09461ea06f5bcc9c593d0858a7772e1812",
"body": null,
"is_bot": false,
"headline": "Add docstring to the `main` function to describe its purpose",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:02:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2aa71a7e2424d460ac30569cf4235251fec27016",
"body": null,
"is_bot": false,
"headline": "Initialize project with main entry point and README file",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86510c5e35d34e66404193ed66474167779f2ef5",
"body": "…s. Added Makefile, `.gitignore`, `rust-toolchain.toml`, and initial GitHub Actions workflows for build, lint, format check, testing, and coverage. Configured Cargo for Rust 2024 edition. Removed unused files.",
"is_bot": false,
"headline": "Set up project structure with essential configuration and CI workflow…",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2026-01-27T11:01:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "985e3ecd70597ce4623d894e3958fca09e374046",
"body": null,
"is_bot": false,
"headline": "start cargo",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2024-04-28T05:59:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a1c6d44ca920c639e5dd47bbf1d4da752ffd453",
"body": null,
"is_bot": false,
"headline": "first commit",
"author_name": "Joaquin Bejar",
"author_login": "joaquinbejar",
"committed_at": "2024-04-28T05:41:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fca02f48c5308000bcf787dd9711ad68e0e312f",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Joaquin Bejar Garcia",
"author_login": "joaquinbejar",
"committed_at": "2024-04-28T05:13:34Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 6,
"commits_last_year": 52,
"latest_release_at": "2026-07-22T15:00:32Z",
"latest_release_tag": "v0.4.0",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 3,
"days_since_latest_release": 1,
"mean_days_between_releases": 35.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "ironfix-core",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-core",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 7990,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2016,
"first_published_at": "2026-01-27T12:49:59.345945Z",
"latest_published_at": "2026-07-22T14:53:31.824909Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-fast",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-fast",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 468,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 85,
"first_published_at": "2026-01-27T13:35:18.899369Z",
"latest_published_at": "2026-07-22T14:57:48.056384Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-store",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-store",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 3043,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 472,
"first_published_at": "2026-01-27T12:52:21.138677Z",
"latest_published_at": "2026-07-22T14:55:57.317819Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-derive",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-derive",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 189,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 29,
"first_published_at": "2026-01-27T12:50:33.059000Z",
"latest_published_at": "2026-07-22T14:54:06.558111Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-engine",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-engine",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 10,
"total_downloads": 2938,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 457,
"first_published_at": "2026-01-27T13:43:29.796940Z",
"latest_published_at": "2026-07-22T14:59:01.231661Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-codegen",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-codegen",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 10,
"total_downloads": 232,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 46,
"first_published_at": "2026-01-27T13:42:56.288181Z",
"latest_published_at": "2026-07-22T14:58:24.175073Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-example",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-example",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 7,
"total_downloads": 134,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 29,
"first_published_at": "2026-01-27T14:15:33.090366Z",
"latest_published_at": "2026-07-22T14:59:38.941209Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
},
{
"name": "ironfix-session",
"exists": true,
"license": "MIT",
"keywords": [
"fix",
"finance",
"trading",
"data-structures",
"finance"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/ironfix-session",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/joaquinbejar/IronFix",
"versions_count": 11,
"total_downloads": 3054,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 476,
"first_published_at": "2026-01-27T13:34:06.758915Z",
"latest_published_at": "2026-07-22T14:56:35.026256Z",
"latest_version_yanked": false,
"days_since_latest_publish": 1
}
]
},
"popularity": {
"forks": 5,
"stars": 10,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2024-05-29",
"count": 1
},
{
"date": "2026-03-02",
"count": 1
},
{
"date": "2026-03-04",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-05-21",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml",
"ironfix-codegen/Cargo.toml",
"ironfix-core/Cargo.toml",
"ironfix-derive/Cargo.toml",
"ironfix-dictionary/Cargo.toml",
"ironfix-engine/Cargo.toml",
"ironfix-example/Cargo.toml",
"ironfix-fast/Cargo.toml",
"ironfix-session/Cargo.toml",
"ironfix-store/Cargo.toml",
"ironfix-tagvalue/Cargo.toml",
"ironfix-transport/Cargo.toml"
],
"largest_source_bytes": 160824,
"source_files_sampled": 79,
"oversized_source_files": 4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml",
"ironfix-codegen/Cargo.toml",
"ironfix-core/Cargo.toml",
"ironfix-derive/Cargo.toml",
"ironfix-dictionary/Cargo.toml",
"ironfix-engine/Cargo.toml",
"ironfix-example/Cargo.toml",
"ironfix-fast/Cargo.toml",
"ironfix-session/Cargo.toml",
"ironfix-store/Cargo.toml",
"ironfix-tagvalue/Cargo.toml",
"ironfix-transport/Cargo.toml"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 4,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "ironfix-dictionary",
"manifest": "ironfix-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "smallvec",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "arrayvec",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "num-traits",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "num-derive",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "rust_decimal",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "chrono",
"manifest": "ironfix-core/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "syn",
"manifest": "ironfix-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0"
},
{
"name": "quote",
"manifest": "ironfix-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "proc-macro2",
"manifest": "ironfix-derive/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "ironfix-core",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "quick-xml",
"manifest": "ironfix-dictionary/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-session",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-store",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-transport",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-tagvalue",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "async-trait",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio-util",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "futures-util",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tracing",
"manifest": "ironfix-engine/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-dictionary",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-tagvalue",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-session",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-store",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-transport",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-fast",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-engine",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "rust_decimal",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-example/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "smallvec",
"manifest": "ironfix-fast/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "parking_lot",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tracing",
"manifest": "ironfix-session/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "async-trait",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "parking_lot",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-store/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "smallvec",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "memchr",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "itoa",
"manifest": "ironfix-tagvalue/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-core",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "ironfix-tagvalue",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tokio-util",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytes",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "memchr",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "tracing",
"manifest": "ironfix-transport/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "proc-macro2",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "quote",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "syn",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "tracing-subscriber",
"direct": false,
"version": null,
"ecosystem": "crates"
}
],
"collected": true,
"truncated": false,
"total_count": 4,
"direct_count": 3,
"indirect_count": 1
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 24,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 30,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "joaquinbejar",
"commits": 55,
"avatar_url": "https://avatars.githubusercontent.com/u/99006095?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml",
"code_coverage.yml",
"docker.yml",
"docs.yml",
"examples.yml",
"format_check.yml",
"lint.yml",
"semver.yml",
"tests.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "af59accf42b37443007bfa30f3ef1ec22d16cad9",
"ran_at": "2026-07-23T16:43:31Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T14:50:01Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-22T14:49:21Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/joaquinbejar/IronFix",
"host": "github.com",
"name": "IronFix",
"owner": "joaquinbejar"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"security": 44,
"vitality": 78,
"community": 40,
"governance": 61,
"engineering": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 78,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 52,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "52 commits in the last year",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 52
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 6,
"latest_release_tag": "v0.4.0",
"releases_from_tags": false,
"days_since_latest_release": 1,
"mean_days_between_releases": 35.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "6 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 6
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~35.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 35.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 1,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 1 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 1
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 40,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"forks": 5,
"stars": 10,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "10 stars",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 10
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"packages": [
"ironfix-core",
"ironfix-fast",
"ironfix-store",
"ironfix-derive",
"ironfix-engine",
"ironfix-codegen",
"ironfix-example",
"ironfix-session"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 18048,
"monthly_downloads": 3610
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,610 downloads/month across crates",
"points": 47.4,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3610,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 61,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 24,
"open_issues": 0,
"closed_issues": 30,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "24/24 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 24,
"decided": 24
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"followers": 289,
"owner_type": "User",
"is_verified": null,
"owner_login": "joaquinbejar",
"public_repos": 84,
"account_age_days": 1630
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "289 followers of joaquinbejar",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 289,
"login": "joaquinbejar"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "84 public repos, account ~4 yr old",
"points": 21.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 84
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"ironfix-core",
"ironfix-fast",
"ironfix-store",
"ironfix-derive",
"ironfix-engine",
"ironfix-codegen",
"ironfix-example",
"ironfix-session"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 1
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "8 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 8,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 1 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 1
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "11 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 11
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "9 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 9
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 44,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 29 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 51,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.6,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "33 of 55 human commits state their intent (structured subject or explanatory body)",
"points": 32,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 33,
"sampled": 55
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"Cargo.toml",
"ironfix-codegen/Cargo.toml",
"ironfix-core/Cargo.toml",
"ironfix-derive/Cargo.toml",
"ironfix-dictionary/Cargo.toml",
"ironfix-engine/Cargo.toml",
"ironfix-example/Cargo.toml",
"ironfix-fast/Cargo.toml",
"ironfix-session/Cargo.toml",
"ironfix-store/Cargo.toml",
"ironfix-tagvalue/Cargo.toml",
"ironfix-transport/Cargo.toml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 55",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 55
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 97,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 160824,
"source_files_sampled": 79,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/79 source files over 60KB",
"points": 52.2,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 79,
"oversized": 4
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index crates:ironfix-core@0.4.0; advisories assessed against the repository dependency graph instead",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-23T16:43:46.950788Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/joaquinbejar/IronFix.svg",
"full_name": "joaquinbejar/IronFix",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with joaquinbejar/IronFix. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
