joernio/flatgraph holds a health index of 59 out of 100, placing it in the Moderate band. It scores highest on Vitality (73/100) and lowest on Community & Adoption (43/100). It was last updated 7 days ago. A single contributor accounts for most of its recent work.
59
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
59
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 1/252 source files over 60KB
Inputs used
primary_language
Scala
largest_source_bytes
79,232
source_files_sampled
252
oversized_source_files
1
Key facts
31GitHub stars
13contributors
18commits, last 12 months
7days since last push
100releases
1bus factor
4open issues
—package ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 7 ⇿
0Stars
7Forks
53Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 52
Each point covers 2 days.
OpenSSF Scorecard 4.9 / 10
4.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-24 21:01 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"columnar-storage",
"database",
"graph",
"nosql",
"prototyping",
"scala"
],
"is_fork": false,
"size_kb": 1880,
"has_wiki": true,
"homepage": null,
"languages": {
"Java": 16337,
"Scala": 882262,
"Shell": 905
},
"pushed_at": "2026-07-17T13:51:06Z",
"created_at": "2022-10-13T17:29:41Z",
"owner_type": "Organization",
"updated_at": "2026-07-17T14:52:45Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Scala",
"significant_languages": [
"Scala"
]
},
"owner": {
"blog": "https://joern.io/",
"name": "joern.io",
"type": "Organization",
"login": "joernio",
"company": null,
"location": null,
"followers": 84,
"avatar_url": "https://avatars.githubusercontent.com/u/71844681?v=4",
"created_at": "2020-09-24T17:50:52Z",
"is_verified": null,
"public_repos": 34,
"account_age_days": 2129
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.34",
"kind": "patch",
"published_at": "2026-07-17T13:48:32Z"
},
{
"tag": "v0.1.33",
"kind": "patch",
"published_at": "2026-06-24T09:32:58Z"
},
{
"tag": "v0.1.32",
"kind": "patch",
"published_at": "2026-05-26T07:16:06Z"
},
{
"tag": "v0.1.31",
"kind": "patch",
"published_at": "2026-03-27T11:58:27Z"
},
{
"tag": "v0.1.30",
"kind": "patch",
"published_at": "2026-03-16T11:05:11Z"
},
{
"tag": "v0.1.29",
"kind": "patch",
"published_at": "2026-03-11T14:29:33Z"
},
{
"tag": "v0.1.28",
"kind": "patch",
"published_at": "2026-03-09T06:57:20Z"
},
{
"tag": "v0.1.27",
"kind": "patch",
"published_at": "2025-10-13T13:58:26Z"
},
{
"tag": "v0.1.26",
"kind": "patch",
"published_at": "2025-09-19T15:45:12Z"
},
{
"tag": "v0.1.25",
"kind": "patch",
"published_at": "2025-07-31T09:19:47Z"
},
{
"tag": "v0.1.24",
"kind": "patch",
"published_at": "2025-07-11T16:48:17Z"
},
{
"tag": "v0.1.23",
"kind": "patch",
"published_at": "2025-07-10T13:21:23Z"
},
{
"tag": "v0.1.22",
"kind": "patch",
"published_at": "2025-07-08T14:34:42Z"
},
{
"tag": "v0.1.21",
"kind": "patch",
"published_at": "2025-07-08T11:41:08Z"
},
{
"tag": "v0.1.20",
"kind": "patch",
"published_at": "2025-07-07T12:13:24Z"
},
{
"tag": "v0.1.19",
"kind": "patch",
"published_at": "2025-07-07T10:14:57Z"
},
{
"tag": "v0.1.18",
"kind": "patch",
"published_at": "2025-07-04T08:21:39Z"
},
{
"tag": "v0.1.17",
"kind": "patch",
"published_at": "2025-06-27T10:13:14Z"
},
{
"tag": "v0.1.16",
"kind": "patch",
"published_at": "2025-05-23T09:06:35Z"
},
{
"tag": "v0.1.15",
"kind": "patch",
"published_at": "2025-05-16T14:12:46Z"
},
{
"tag": "v0.1.14",
"kind": "patch",
"published_at": "2025-05-14T10:43:32Z"
},
{
"tag": "v0.1.13",
"kind": "patch",
"published_at": "2025-05-07T16:12:44Z"
},
{
"tag": "v0.1.12",
"kind": "patch",
"published_at": "2025-05-07T16:12:44Z"
},
{
"tag": "v0.1.11",
"kind": "patch",
"published_at": "2025-03-17T10:25:46Z"
},
{
"tag": "v0.1.10",
"kind": "patch",
"published_at": "2025-03-16T17:13:15Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2025-01-28T14:46:01Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2025-01-28T11:42:25Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2025-01-14T14:02:33Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2025-01-14T09:17:51Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2025-01-14T07:27:00Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2025-01-10T12:35:23Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2025-01-07T09:23:44Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2024-12-16T14:13:43Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2024-12-11T15:02:52Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2024-12-11T15:02:52Z"
},
{
"tag": "v0.0.101",
"kind": "patch",
"published_at": "2024-12-11T15:02:52Z"
},
{
"tag": "v0.0.100",
"kind": "patch",
"published_at": "2024-11-25T17:58:02Z"
},
{
"tag": "v0.0.99",
"kind": "patch",
"published_at": "2024-11-06T15:18:45Z"
},
{
"tag": "v0.0.98",
"kind": "patch",
"published_at": "2024-11-06T15:18:45Z"
},
{
"tag": "v0.0.97",
"kind": "patch",
"published_at": "2024-11-05T11:12:21Z"
},
{
"tag": "v0.0.96",
"kind": "patch",
"published_at": "2024-11-05T09:35:35Z"
},
{
"tag": "v0.0.95",
"kind": "patch",
"published_at": "2024-11-04T14:13:14Z"
},
{
"tag": "v0.0.94",
"kind": "patch",
"published_at": "2024-11-04T09:51:29Z"
},
{
"tag": "v0.0.93",
"kind": "patch",
"published_at": "2024-11-04T09:51:29Z"
},
{
"tag": "v0.0.92",
"kind": "patch",
"published_at": "2024-11-04T09:18:33Z"
},
{
"tag": "v0.0.91",
"kind": "patch",
"published_at": "2024-10-17T08:06:35Z"
},
{
"tag": "v0.0.90",
"kind": "patch",
"published_at": "2024-09-26T15:48:26Z"
},
{
"tag": "v0.0.89",
"kind": "patch",
"published_at": "2024-09-16T15:46:14Z"
},
{
"tag": "v0.0.88",
"kind": "patch",
"published_at": "2024-09-11T13:19:57Z"
},
{
"tag": "v0.0.87",
"kind": "patch",
"published_at": "2024-08-26T08:32:47Z"
},
{
"tag": "v0.0.86",
"kind": "patch",
"published_at": "2024-08-02T06:49:33Z"
},
{
"tag": "v0.0.85",
"kind": "patch",
"published_at": "2024-07-31T10:34:35Z"
},
{
"tag": "v0.0.84",
"kind": "patch",
"published_at": "2024-07-31T09:54:19Z"
},
{
"tag": "v0.0.83",
"kind": "patch",
"published_at": "2024-07-30T08:01:43Z"
},
{
"tag": "v0.0.82",
"kind": "patch",
"published_at": "2024-07-29T15:49:44Z"
},
{
"tag": "v0.0.81",
"kind": "patch",
"published_at": "2024-07-12T14:35:37Z"
},
{
"tag": "v0.0.80",
"kind": "patch",
"published_at": "2024-07-12T09:00:55Z"
},
{
"tag": "v0.0.79",
"kind": "patch",
"published_at": "2024-07-11T12:03:44Z"
},
{
"tag": "v0.0.78",
"kind": "patch",
"published_at": "2024-07-09T11:53:26Z"
},
{
"tag": "v0.0.77",
"kind": "patch",
"published_at": "2024-07-04T14:59:47Z"
},
{
"tag": "v0.0.76",
"kind": "patch",
"published_at": "2024-07-04T10:59:07Z"
},
{
"tag": "v0.0.75",
"kind": "patch",
"published_at": "2024-07-04T09:20:54Z"
},
{
"tag": "v0.0.74",
"kind": "patch",
"published_at": "2024-07-03T12:45:42Z"
},
{
"tag": "v0.0.73",
"kind": "patch",
"published_at": "2024-07-03T11:39:45Z"
},
{
"tag": "v0.0.72",
"kind": "patch",
"published_at": "2024-07-02T10:18:44Z"
},
{
"tag": "v0.0.71",
"kind": "patch",
"published_at": "2024-07-02T10:06:14Z"
},
{
"tag": "v0.0.70",
"kind": "patch",
"published_at": "2024-06-27T13:06:29Z"
},
{
"tag": "v0.0.69",
"kind": "patch",
"published_at": "2024-06-27T13:05:07Z"
},
{
"tag": "v0.0.68",
"kind": "patch",
"published_at": "2024-06-27T08:32:22Z"
},
{
"tag": "v0.0.67",
"kind": "patch",
"published_at": "2024-06-26T10:47:02Z"
},
{
"tag": "v0.0.66",
"kind": "patch",
"published_at": "2024-06-24T10:13:15Z"
},
{
"tag": "v0.0.65",
"kind": "patch",
"published_at": "2024-06-18T11:32:09Z"
},
{
"tag": "v0.0.64",
"kind": "patch",
"published_at": "2024-05-28T11:19:20Z"
},
{
"tag": "v0.0.63",
"kind": "patch",
"published_at": "2024-05-27T12:21:00Z"
},
{
"tag": "v0.0.62",
"kind": "patch",
"published_at": "2024-05-27T09:04:12Z"
},
{
"tag": "v0.0.61",
"kind": "patch",
"published_at": "2024-05-24T15:36:59Z"
},
{
"tag": "v0.0.60",
"kind": "patch",
"published_at": "2024-05-23T13:14:29Z"
},
{
"tag": "v0.0.59",
"kind": "patch",
"published_at": "2024-05-22T10:37:58Z"
},
{
"tag": "v0.0.58",
"kind": "patch",
"published_at": "2024-05-21T17:47:00Z"
},
{
"tag": "v0.0.57",
"kind": "patch",
"published_at": "2024-05-21T08:17:31Z"
},
{
"tag": "v0.0.56",
"kind": "patch",
"published_at": "2024-05-21T08:08:37Z"
},
{
"tag": "v0.0.55",
"kind": "patch",
"published_at": "2024-05-16T15:19:29Z"
},
{
"tag": "v0.0.54",
"kind": "patch",
"published_at": "2024-05-07T12:49:33Z"
},
{
"tag": "v0.0.53",
"kind": "patch",
"published_at": "2024-05-07T11:06:58Z"
},
{
"tag": "v0.0.52",
"kind": "patch",
"published_at": "2024-05-06T14:06:19Z"
},
{
"tag": "v0.0.51",
"kind": "patch",
"published_at": "2024-05-03T15:49:47Z"
},
{
"tag": "v0.0.50",
"kind": "patch",
"published_at": "2024-05-03T14:49:53Z"
},
{
"tag": "v0.0.49",
"kind": "patch",
"published_at": "2024-05-03T12:47:19Z"
},
{
"tag": "v0.0.48",
"kind": "patch",
"published_at": "2024-05-03T12:40:22Z"
},
{
"tag": "v0.0.47",
"kind": "patch",
"published_at": "2024-05-03T09:04:56Z"
},
{
"tag": "v0.0.46",
"kind": "patch",
"published_at": "2024-05-02T11:20:09Z"
},
{
"tag": "v0.0.45",
"kind": "patch",
"published_at": "2024-05-02T09:44:46Z"
},
{
"tag": "v0.0.44",
"kind": "patch",
"published_at": "2024-05-02T09:41:10Z"
},
{
"tag": "v0.0.43",
"kind": "patch",
"published_at": "2024-04-30T09:54:46Z"
},
{
"tag": "v0.0.42",
"kind": "patch",
"published_at": "2024-04-30T09:14:02Z"
},
{
"tag": "v0.0.41",
"kind": "patch",
"published_at": "2024-04-30T09:11:19Z"
},
{
"tag": "v0.0.40",
"kind": "patch",
"published_at": "2024-04-30T06:48:01Z"
},
{
"tag": "v0.0.39",
"kind": "patch",
"published_at": "2024-04-29T13:38:51Z"
},
{
"tag": "v0.0.38",
"kind": "patch",
"published_at": "2024-04-26T10:34:58Z"
},
{
"tag": "v0.0.37",
"kind": "patch",
"published_at": "2024-04-26T07:51:10Z"
}
],
"recent_commits": [
{
"oid": "40d5bfa9c46a326162f5fa4632bd9db53208dcd6",
"body": "* use -Yfuture-lazy-vals\n\n* fix some compiler warnings",
"is_bot": false,
"headline": "use -Yfuture-lazy-vals and fix some compiler warnings (#363)",
"author_name": "maltek",
"author_login": "maltek",
"committed_at": "2026-07-17T13:48:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b3ba2673e9a6c51eb77fa940ab6f954c5e98bcc",
"body": null,
"is_bot": false,
"headline": "bump zstd-jni version, scala version, and release version (#362)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2026-07-16T14:32:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2a7912af7d0e4b1603a716f7391b6087b571dde",
"body": "… streaming (#361)\n\n* docs: streaming GraphSON export implementation spec\n\n* test: extend Generic schema with Float/Double/Long/Boolean property types\n\nAdd floatOptional, doubleOptional, longOptional, and booleanOptional\nproperties to the Generic test schema. These properties enable testing of\nFloat\n[…]\nn Core streams tokens directly to a BufferedOutputStream, so memory\nusage is bounded by the generator buffer, not graph size.\n\nThe import path (GraphSONImporter) is unchanged. Public API is unchanged.",
"is_bot": false,
"headline": "fix: replace GraphSONExporter spray-json write path with Jackson Core…",
"author_name": "Erich Oliphant",
"author_login": "eoliphan",
"committed_at": "2026-06-24T09:32:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "86cb2899a764733f690c4424140ffb1b6e9bf3e8",
"body": null,
"is_bot": false,
"headline": "Add Domain Classes for tests (#358)",
"author_name": "Louis van der Walt",
"author_login": "SuperUserDone",
"committed_at": "2026-05-26T07:16:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d1480748dbcd728937958597820131a3f729d88",
"body": "* Overload filters to accept Option[Type]\n\n* Update API to add IfPresent api to optional int traversal",
"is_bot": false,
"headline": "Overload filters to accept Option[Type] (#357)",
"author_name": "Louis van der Walt",
"author_login": "SuperUserDone",
"committed_at": "2026-05-19T13:01:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8abec4230f9b445bdbe0fd5dc919c10b1ee4a244",
"body": null,
"is_bot": false,
"headline": "enforce \"old syntax\" again (#356)",
"author_name": "maltek",
"author_login": "maltek",
"committed_at": "2026-04-09T14:20:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bb85dabc37b8ba855f5b6bd9e373fbf01cd021c",
"body": "The `ImplicitNotFound` annotation only accepts compile time constants as argument since Scala 3.7..\nTo adjust for that I removed the `.stripMargin` call.\n\nAlso bumped to latest LTS Scala version 3.3.7 and remove `-old-syntax`\nflag which does not have any impact anymore.",
"is_bot": false,
"headline": "Make flatgraph Scala 3.7. compatible. (#355)",
"author_name": "Markus Lottmann",
"author_login": "ml86",
"committed_at": "2026-03-27T11:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95a14dc3ed6c5f300e78bdf55c5abd634f9d361a",
"body": "Co-authored-by: Malte Kraus <malte.kraus@harness.io>",
"is_bot": false,
"headline": "table rendering: handle newlines correctly (#353)",
"author_name": "maltek",
"author_login": "maltek",
"committed_at": "2026-03-16T11:05:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "391c11c1dd9e5594ac67cb799c730ed1f1bfc808",
"body": "* remove table min-width in order to keep output identical to before\n\nwe have a lot of tests that depend on the exact layout of the tables, e.g. see https://ci.shiftleftsecurity.com/blue/organizations/jenkins/CI-PR-CODESCIENCE-pr.Jenkinsfile/detail/CI-PR-CODESCIENCE-pr.Jenkinsfile/10852/tests\r\n\r\nnot\n[…]\n the dependency chain to verify that's the only inadvertent change we want to avoid.\n\n* fix the total width of the table\n\n* scalafmtAll\n\n---------\n\nCo-authored-by: Malte Kraus <malte.kraus@harness.io>",
"is_bot": false,
"headline": "fix width calculations for tables (#352)",
"author_name": "maltek",
"author_login": "maltek",
"committed_at": "2026-03-11T14:29:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1afa98c31d31887a496f7056ddd55bc834ee9f08",
"body": "asciitable is only used for a simple use case, which is tested in\nTableTests.scala. It happens to have quite a large dependendency tree:\nascii-utf-themes, skb-interfaces, ST4, antlr4 (with icu4j), antlr-runtime,\njavax.json, org.abego.treelayout, and antlr4-runtime.\n\nAnd javax.json is GPL (dual) licensed. Not the end of the world, but\nit's better to just replace it with a simple implementation IMO.",
"is_bot": false,
"headline": "remove asciitable from dependeny tree (#351)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2026-03-09T06:57:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7fa62d2c7db11b24111dd1433701edf31f232df",
"body": "Co-authored-by: Malte Kraus <malte.kraus@harness.io>",
"is_bot": false,
"headline": "enforce consistent scala syntax (curly braces) (#350)",
"author_name": "maltek",
"author_login": "maltek",
"committed_at": "2026-02-26T11:19:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b338597d9906059be6bdb88afa98b02cd7b1f30",
"body": "* Fix string interpolation in debug log\n\n* Fix logging of edge kinds count in Serialization.scala",
"is_bot": false,
"headline": "Fix string interpolation in debug log (#349)",
"author_name": "Max Leuthäuser",
"author_login": "max-leuthaeuser",
"committed_at": "2025-11-06T10:33:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b496584b0db55078b32ae4389de12a305416e89b",
"body": null,
"is_bot": false,
"headline": "add groupByOrdered (#346)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2025-10-13T13:58:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88909f9dbd33f1b849a2ae9d07748d67af0ab58d",
"body": "…348)\n\nPrior to this we'd see rather confusing log entries, e.g.\n```\nSL_LOGGING_LEVEL=debug ./c2cpg.sh ~/tmp/cpgtesting/linux-kernel/linux-6.1.3/fs/ext4\n[DEBUG] wrote 43 nodes with 58 edges and 167 properties\nCpg[Graph[183630 nodes]]\n```",
"is_bot": false,
"headline": "Serialization: rename for clarity: we're dealing with `kinds` here (#…",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-10-06T12:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9e47982de811642ae27ded9b9657d45fa226c83",
"body": "Prior to this, if a user tried to delete a node and an adjacent edge at\nthe same time, we would run into this:\n```\nscala.MatchError: flatgraph.DiffGraphBuilder$RemoveEdge@7bcbf3a8 (of class flatgraph.DiffGraphBuilder$RemoveEdge)\n\tat flatgraph.DiffGraphApplier.splitUpdate$$anonfun$2(DiffGraphApplier.\n[…]\n-core_3-0.1.25.jar:0.1.25]\n```\n\nWhich was because the condition was on the `case RemoveEdge` filtered\nout that case and there's no fallback `case _` or similar.\nThis makes it explicit and adds a test.",
"is_bot": false,
"headline": "DiffGraph: allow simultaneous edge and node removal (#347)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-09-19T15:45:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7a092cfed01ecdc40aaa7e57573c7f1f94d06f58",
"body": null,
"is_bot": false,
"headline": "Fix logger info message for closing graph (#344)",
"author_name": "Max Leuthäuser",
"author_login": "max-leuthaeuser",
"committed_at": "2025-08-25T08:33:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6f5184172d5b565a903e660a8bb729dd3a1627b",
"body": "* allow to override default edge accessor\n\n* fmt",
"is_bot": false,
"headline": "allow to override default edge accessor (#342)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-07-31T09:19:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b86ae12bc307b50fc3121624af87919698f5d496",
"body": "* Only log about graph closing if it is not a zero operation.\n\nFor graphs which have no storage backend, `close` just not do enough\nworth logging.\n\n* Update core/src/main/scala/flatgraph/Graph.scala\n\nCo-authored-by: Michael Pollmeier <michael@michaelpollmeier.com>\n\n---------\n\nCo-authored-by: Michael Pollmeier <michael@michaelpollmeier.com>",
"is_bot": false,
"headline": "Only log about graph closing if it is not a zero operation. (#341)",
"author_name": "Markus Lottmann",
"author_login": "ml86",
"committed_at": "2025-07-25T05:08:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca81e5508483a5303225b90fa6c1f4efa3018089",
"body": "* add some docs regarding security\n\n* Update README.md\n\nCo-authored-by: Michael Pollmeier <michael@michaelpollmeier.com>\n\n* Update README.md\n\nCo-authored-by: Michael Pollmeier <michael@michaelpollmeier.com>\n\n* Update README.md\n\nCo-authored-by: Michael Pollmeier <michael@michaelpollmeier.com>\n\n* Update README.md\n\nCo-authored-by: Michael Pollmeier <michael@michaelpollmeier.com>\n\n* clean up more types\n\n---------\n\nCo-authored-by: Michael Pollmeier <michael@michaelpollmeier.com>",
"is_bot": false,
"headline": "add some docs regarding security (#335)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2025-07-14T15:05:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "485e30b1e4f12a1607b2d350a670b7a34d1059c1",
"body": "* Deserialization: verify manifest size\n\nre https://github.com/joernio/flatgraph/security/advisories/GHSA-jqmx-3x2p-69vh\n\nn.b. it is not our goal to have a \"safe\" file format, and we need to\ndocument that properly. But adding some more straightforward checks\ndoesn't harm.\n\n* clarify comment\n\n* also check for manifestSize > Int.MaxValue",
"is_bot": false,
"headline": "Deserialization: verify manifest size (#336)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-07-11T16:48:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e0bb23d6fd4a95daa7c9b731d7f5d267625ac7e",
"body": "if the iterable can only be iterated once, the 'knownSize' will\ndecrement on iteration, leading to errors like this:\n`Iterable was expected to have exactly one element, but it has 1`",
"is_bot": false,
"headline": "loneElement: fix `knownSize` count (#340)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-07-11T16:47:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ed575d3e12056e32e9ea3513d4b6a4662a7cfa3",
"body": null,
"is_bot": false,
"headline": "loneElement and loneElementOption: extension methods for Iterable (#339)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-07-10T13:21:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c52290673efec6fd232f672eca9e103348e52d45",
"body": null,
"is_bot": false,
"headline": "Sort generated property names (#338)",
"author_name": "Johannes Coetzee",
"author_login": "johannescoetzee",
"committed_at": "2025-07-08T14:34:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9a1df2740af28afe3914dc50ae3cebfba9e198f",
"body": null,
"is_bot": false,
"headline": "Fix nested comment generation (#337)",
"author_name": "Johannes Coetzee",
"author_login": "johannescoetzee",
"committed_at": "2025-07-08T14:21:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a928dc15383e00dd83db2083a7a9915e9e6632b",
"body": null,
"is_bot": false,
"headline": "Fix PropertyNames for contained nodes (#334)",
"author_name": "Johannes Coetzee",
"author_login": "johannescoetzee",
"committed_at": "2025-07-08T11:41:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94b2838221d2b6d22fe218169b1271aff67fd0de",
"body": null,
"is_bot": false,
"headline": "Fix small typo (#333)",
"author_name": "Johannes Coetzee",
"author_login": "johannescoetzee",
"committed_at": "2025-07-07T12:13:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6269a7a149c3b6e69143ff3cd12f020afd2ec48",
"body": "* minor: move helper case class\n\n* split up generated classes into smaller units\n\nextract `NewNode` class and object into separate file, these can get\nvery long...\n\n* generate sources",
"is_bot": false,
"headline": "split up generated classes into smaller units (#332)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-07-07T10:14:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64e2a13e93e2020dbe3277c1a0513c406dd80577",
"body": "since we use primitives rather than specialised types for things like\nnodeKind, propertyKind and seq, it's safer and easier to read if we\nuse named arguments",
"is_bot": false,
"headline": "generated domain classes: use named parameters (#331)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-07-04T09:43:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43fb84d546604769e5cee6c290bf0f7ad42637da",
"body": "…es (#328)\n\n* Remove per-class PropertyDefaults in favour of a single object\n\n* Remove per-type properties and property names\n\n* Move PropertyNames.java to PropertyNames.scala\n\n* Fix contained node names and unit tests\n\n* Add contained nodes to node property comment\n\n* Refactor to clean up code and \n[…]\n* Fix duplicate property generation and comment formatting\n\n* add a sample property comment\n\n* redo scaladoc comment\n\n* fmt\n\n---------\n\nCo-authored-by: Michael Pollmeier <michael@michaelpollmeier.com>",
"is_bot": false,
"headline": "Reduce Properties, Names, and Defaults duplication in generated class…",
"author_name": "Johannes Coetzee",
"author_login": "johannescoetzee",
"committed_at": "2025-07-04T08:21:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d06d28d6eb2802bf6f601df25423ce776c2b883a",
"body": "…ws (#330)",
"is_bot": false,
"headline": "use .toShortSafely in more places to avoid accidental integer overflo…",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-07-03T16:30:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bae4832776a8e9f5e9a1c9cb8ee98e6ec492aa5",
"body": "…329)\n\nif the numbers get too large we want the compiler to tell us,\nreally... compare:\n\n```scala\ndef foo(s: Short) = print(s)\n\nfoo(5)\n// 5\n\nfoo(500000)\n-- [E007] Type Mismatch Error: --------\n |foo(500000)\n | ^^^^^^\n | Found: (500000 : Int)\n | Required: Short\n```",
"is_bot": false,
"headline": "codegen: leave out `.toShort` to avoid accidental integer overflow (#…",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-07-03T10:52:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91df5db2081ec6992d9f2e2f7e3d691fe690900b",
"body": "* name results with case class rather than unnamed tuple\n* extract method\n* more than 1 char for vn (variable names) is allowed",
"is_bot": false,
"headline": "small refactorings (#327)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-06-27T10:13:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f09d83b970a13e971d5e21c8ece1268ff9410c64",
"body": "* cleanup: use \"correct\" filename\n\n* WIP\n\n* graph.close: only serialise to file if necessary\n\ni.e. if file doesn't exist yet or there have been changes to the graph\n\n* pr comment plus some refactorings\n\n* fmt\n\n* minor",
"is_bot": false,
"headline": "graph.close: only serialise to file if necessary (#326)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-06-27T09:58:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53ec8e601365e1b95521627c9953753e6ff69cc4",
"body": "also: upgrade sbt",
"is_bot": false,
"headline": "release at will only, not automatically (#325)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-06-26T09:07:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03744b152c6d94b6ba292a45640498992629f168",
"body": "* downgrade to scala 3.3 LTS\n\nProjects that are used as libraries should stick to the latest LTS version.\n\nScala 3 guarantees backward compatibility across minor releases in the entire 3.x series, but no\nt forward compatibility. This means that libraries compiled with any Scala 3.x version can be us\n[…]\ntml#library-maintainers\nhttps://docs.scala-lang.org/overviews/core/binary-compatibility-of-scala-releases.html\n\n* latest odb-core, scalamock used to depend on 3.4.x, upgrade fixes that\n\n* fix warnings",
"is_bot": false,
"headline": "downgrade to scala 3.3 LTS (#324)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-05-23T09:06:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4c6593bac3c228260fa533b7f04df8aebb72b977",
"body": "also upgrade scalafmt",
"is_bot": false,
"headline": "java friendly api (#323)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-05-16T14:12:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bdf7eaa7cf6ba1f24d2a12a0ec30aef20707b54",
"body": null,
"is_bot": false,
"headline": "scala 3.6.4 (#321)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-05-14T10:43:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd7fa8e7236f274d847066c698de296dd4851b81",
"body": "* log node/edge counts when writing graphs\n\n* collect counts during serialization to avoid walking graph twice\n\n* also log counts during deserialization",
"is_bot": false,
"headline": "log node/edge counts when writing graphs (#320)",
"author_name": "maltek",
"author_login": "maltek",
"committed_at": "2025-05-07T16:12:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37bfe858c2635f504c3ea9d0bfebe99b0bdcc4d8",
"body": null,
"is_bot": false,
"headline": "upgrade dependencies (#318)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-03-17T10:25:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4040d1b443867f38cbf5c127ba9d9b5e839f9027",
"body": null,
"is_bot": false,
"headline": "Allow to manually trigger release (#317)",
"author_name": "Fabian Yamaguchi",
"author_login": "fabsx00",
"committed_at": "2025-03-16T17:13:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b0057cdf22458fe13873d315a86c9e939752e03",
"body": null,
"is_bot": false,
"headline": "fix up legacy odb conversion (#304)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2025-01-28T14:46:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3a35e16f4ba54a63d4373f6bf3fee3756063387",
"body": "…000bc490fa83be47e9fc19c94658c7e9e (#303)",
"is_bot": false,
"headline": "oops, check in generated code for test-schemas. Amends #297 / a64ce01…",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2025-01-28T11:42:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edabc695bae5ce343634f0e68b97247346842752",
"body": null,
"is_bot": false,
"headline": "performance: parallelize diffgraph application, store and load (#288)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2025-01-27T12:53:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a64ce01000bc490fa83be47e9fc19c94658c7e9e",
"body": null,
"is_bot": false,
"headline": "use the index for stuff like cpg.method.fullNameExact(a,b,c) (#297)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2025-01-27T12:50:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb0570bb951c6b0b79bb202e574c925347b91c87",
"body": null,
"is_bot": false,
"headline": "add yourkit endorsement (#293)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-01-14T14:02:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ca8dbac8748409484957b92299ca065bc5430e2",
"body": "... so it can be used nicely in user feedback. Current example _before_\r\nthis PR:\r\n```\r\n[error] (schema / Compile / runMain) java.lang.AssertionError: proto ids must be unique across all schema elements, however we found the following duplicates in node properties:\r\n[error] 251 -> flatgraph.schema.P\n[…]\n ids must be unique across all schema elements, however we found the following duplicates in node properties:\r\n[error] 251 -> flatgraph.schema.Property@3ab75944,flatgraph.schema.Property@34fe78a8\r\n```",
"is_bot": false,
"headline": "schema dsl: make `Property` a case class... (#292)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-01-14T09:17:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b5ec183b656aef3c4ba8a05a7e0235744e9a6d45",
"body": "`java.nio.Path::getParent` returns `null` if the path is the root\r\ndirectory already, so trying to create the root's parent directory both\r\nfails hard and doesn't make any sense",
"is_bot": false,
"headline": "serialization: handle 'null' value from java's File.getParent api (#291)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-01-14T07:27:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6b0cbcd95173b0df1aa3a929327e2e4813b41ee",
"body": "as discussed in joernio/joern#5158\r\nI didn't get any feedback if this really solves their issue,\r\nbut this is certainly better than before",
"is_bot": false,
"headline": "dot export: fix file format (#289)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-01-10T12:35:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de83358128c776ac7fd398a4a0f76d2a39345ea8",
"body": "sbt is no longer included by default in the ubuntu 24 runner\r\nhttps://github.com/sbt/setup-sbt\r\nhttps://github.com/actions/setup-java/issues/712#issuecomment-2557396980",
"is_bot": false,
"headline": "fix github actions (#287)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2025-01-07T09:23:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "066654dd286293b8e80f1a75e3fb8c147531220f",
"body": "prior to this change, the test would fail with:\r\n```\r\njava.io.FileNotFoundException: /tmp/foo/bar (No such file or directory)\r\n\tat java.base/java.io.RandomAccessFile.open0(Native Method)\r\n\tat java.base/java.io.RandomAccessFile.open(RandomAccessFile.java:345)\r\n\tat java.base/java.io.RandomAccessFile.<init>(RandomAccessFile.java:259)\r\n\tat java.base/java.io.RandomAccessFile.<init>(RandomAccessFile.java:214)\r\n\tat flatgraph.storage.Serialization$.writeGraph(Serialization.scala:23)\r\n```",
"is_bot": false,
"headline": "storage: create parent directories if they don't exist (#281)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-12-16T14:13:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da76b985341a41c5621901f4a794561058b9b631",
"body": null,
"is_bot": false,
"headline": "scala 3.5.2, upgrade deps (#278)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-12-11T15:02:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d99105210027d33139dafbcfcf84768f516f43dd",
"body": null,
"is_bot": false,
"headline": "Update zstd-jni to 1.5.6-8 (#276)",
"author_name": "Scala Steward",
"author_login": "scala-steward",
"committed_at": "2024-11-25T17:58:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acfb16c593cd6cec2cdee0f4bccc545aaaaf8cdb",
"body": "* check tmp dir for noexec flag and warn user\r\n\r\nzstd requires a tmp dir without the `noexec` flag - probe for that and\r\ninform the user about their options\r\n\r\n* fmt\r\n\r\n* readme",
"is_bot": false,
"headline": "check tmp dir for noexec flag and warn user (#275)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-11-06T15:18:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4309489bc5702c15d9174c268bdedab1c025ef86",
"body": "the default sbt naming convention for plugins does not conform to the\r\nmaven specification - see https://github.com/sbt/sbt/issues/3410",
"is_bot": false,
"headline": "sonatype publishing fix for sbt plugin (#271)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-11-05T11:12:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c66924c80fb426d5d72a8109ed47f6501fbed2a2",
"body": "We migrated to sonatype central due to publishing problems, as\r\nsuggested by their support. Let's see if this works.\r\n\r\nhttps://central.sonatype.com/",
"is_bot": false,
"headline": "sonatype central (#270)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-11-05T09:35:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dc99c13a0fed0c7e9606711bf8660b3b0c40395",
"body": null,
"is_bot": false,
"headline": "upgrade release plugin (#269)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-11-04T14:13:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ab8629643e71b3a149c0e6573fe4cb7641e3590",
"body": null,
"is_bot": false,
"headline": "upgrade deps (#268)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-11-04T09:51:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f2fa1bbf98043faccac6783aa6c98a8d27c8d50",
"body": null,
"is_bot": false,
"headline": "print more debug infos on error (#267)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-11-04T09:18:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78b5dc0cf13e58fae98c0699a7d9a4b40dfd02bd",
"body": "fixes https://github.com/joernio/flatgraph/issues/261",
"is_bot": false,
"headline": "neo4j export: escape `\\` (#263)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-10-17T08:06:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab93c284d93b768f6d633ad5b11a45593fce1d80",
"body": "The code snippet generated with `FilterSteps#genericOption` results in an error\r\nlike the one below during compilation.\r\n\r\n```\r\nvalue || is not a member of Iterable[Long @uncheckedVariance]\r\n```\r\n\r\nReplacing `.empty` with `.isEmpty` should fix this.\r\n\r\nSigned-off-by: ricekot <git@ricekot.com>",
"is_bot": false,
"headline": "Fix generated code snippet for property traversal (#258)",
"author_name": "Akshath Kothari",
"author_login": "ricekot",
"committed_at": "2024-09-26T15:48:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c6bf437f5de242aeeb9e62a9cebab184b9974f2",
"body": "* also fixes a minor bug with node initialization order of transitively added nodes from diffgraphs",
"is_bot": false,
"headline": "Make diffgraph applier return number of transitive changes (#256)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2024-09-16T15:46:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e05d59351b17b87345b36177788839039cceb33",
"body": "The diffgraph applier was missing a check to not overread deletions into the next seq, which could happen if the ordering of subseqs was unfortunate.",
"is_bot": false,
"headline": "fix a bug in edge deletions (#255)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2024-09-11T13:19:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb570af2c841614bffe5734154bfdfe1c42124b9",
"body": null,
"is_bot": false,
"headline": "TestUtils: copy single node (#252)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-08-26T08:32:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f16c9b29ecb365b0020bb98ad7740b834ea09e7",
"body": "* harden codegen: ensure that users can start with a blank page...\r\n\r\n... without any compiler errors or warnings in the generated domain classes\r\n\r\n* fmt",
"is_bot": false,
"headline": "harden codegen: ensure that users can start with a blank page... (#247)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-08-02T06:49:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82cbc427ce325dfa00e9f4386a462bf8ddc65f4e",
"body": null,
"is_bot": false,
"headline": "use logger instead of println (#246)",
"author_name": "Xavier Pinho",
"author_login": "xavierpinho",
"committed_at": "2024-07-31T10:34:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e8010ffc5d79111956ad01b6873f97ff2697b36",
"body": "this introduces a minified version of the cpg schema so that the test\r\ncontinues to make sense from a domain pov",
"is_bot": false,
"headline": "revive CompileTests - these were buried in benchmarks (#245)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-31T09:54:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "581c50b7d579b2bf164721aa44fac84b137dc1cf",
"body": null,
"is_bot": false,
"headline": "trim dependency tree for `core` (#242)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-30T08:01:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c169fb5eab205996d6de7812bc58e364a1f539c",
"body": "* add structured debug representation",
"is_bot": false,
"headline": "add structured debug representation (#243)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2024-07-29T15:49:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f190817cc47566fa9cd050138eaa3a369fcb4f8",
"body": "* improve error message for unexpected header\r\n\r\nbefore:\r\n```\r\nexpected header (`[B@75c274f1`), but found 12249\r\n```\r\n\r\nnow:\r\n```\r\nexpected header 'FLT GRPH' (`7076843271828072`), but found '1234-97000'\r\n```\r\n\r\n* fmt",
"is_bot": false,
"headline": "improve error message for unexpected header (#226)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-12T14:35:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "647fc0280033c82a2108ef5d2471f84f781edd3d",
"body": "…225)\n\n* unix `file` util reports `data` as type\r\n* `cat` and friends print `FLT GRPH...`",
"is_bot": false,
"headline": "change file header to less common and easier detectable magicbytes (#…",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-12T09:00:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "852eeb92a2fb355f8db3edb8ccbbc4f69906c1cc",
"body": "* add reverse converter flatgraph->odb\r\n* add verbose option to command-line tool to dump the manifest\r\n* remove legacyId property that the odb->flatgraph converter inserted\r\n* fix converter bugs in odb->flatgraph for scanned cpgs (containedNodes)",
"is_bot": false,
"headline": "add reverse converter (#224)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2024-07-11T12:03:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "176e151e19e2d348b21a950cc4447f130eac3935",
"body": null,
"is_bot": false,
"headline": "properties (scala variant of propertiesMap) (#223)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-09T11:53:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49697a8ec9f795293378847adc0dac8eeb93b6db",
"body": null,
"is_bot": false,
"headline": "copy without braces: to minify diff to odb (#222)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-08T14:47:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "824d66e04df244207de0180554239ad715908fd1",
"body": "* java constants should be uppercase (as per java convention and odb)\r\n\r\n* CamelCaseNames for PropertyAccessors, Accessors etc.\r\n\r\n* fmt",
"is_bot": false,
"headline": "naming things: CamelCase for scala, SNAKE_CASE for java (#221)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-04T14:59:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01563e9d2f14a0e0f3c4f5eae7c42cd9b9c551cb",
"body": "* move Accessors.scala into correct directory\r\n\r\n* refactor output dir handling, move BaseTypes into `nodes` dir\r\n\r\n* move edges to correct subdir\r\n\r\n* codegen: put everything into the correct subdirectory",
"is_bot": false,
"headline": "codegen: put everything into the correct subdirectory (#220)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-04T10:59:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e4528ca4606d40a30fcc9dd21a632d630b2da53",
"body": "…ct directory (#219)",
"is_bot": false,
"headline": "codegen refactoring: split up massive Traversals.scala, move to corre…",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-04T09:20:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51e505f6686043af9f438f208509e86975ddcef8",
"body": null,
"is_bot": false,
"headline": "add nodestarters by nodeId (#218)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2024-07-03T12:45:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab07c3a8232d6d86b165afa7554017eb9e13b579",
"body": "…void referencing the `flatgraph` namespace (#217)\n\n* codegen: add some type aliases so that the domain-specific code can avoid referencing the `flatgraph` namespace\r\n\r\n* fmt",
"is_bot": false,
"headline": "codegen: add some type aliases so that the domain-specific code can a…",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-03T11:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6dfa1cd91276921e82cbf3a2f1018a02328eb529",
"body": "… (#214)\n\nin odb's codegen these are calles Properties rather than PropertyKeys,\r\nso to minify the diff (and mental context) let's keep it that way",
"is_bot": false,
"headline": "rename PropertyKeys -> Properties (to minify diff and mental context)…",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-07-02T10:18:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad79979a07df58ef337b9104fa72ca2fcb9bfa3d",
"body": "* This adds generated code for merging properties of NewNodes. This should alleviate the heap issues with AstCreationPass, or generally the heap issues with writing diffgraphs that contain a lot of NewNodes.\r\n\r\n* release some internal datastructions of diffgraph applier early",
"is_bot": false,
"headline": "heap stuff plus (#215)",
"author_name": "bbrehm",
"author_login": "bbrehm",
"committed_at": "2024-07-02T10:06:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5a3d18e8834a9c7bf1aaeb6200d9bcef8be6959",
"body": null,
"is_bot": false,
"headline": "add prefix to technical accessors, just like we used to in odb (#211)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-06-27T13:06:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cacc7f40a6e9d43d4542af0b8dfcb1e5a913485d",
"body": "* fixup build: add `help` to the default projects\r\n\r\n* fmt",
"is_bot": false,
"headline": "fixup build: add `help` to the default projects (#212)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-06-27T13:05:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c563f290972958c5392d755bae42c274b9bf2da",
"body": "… (#209)\n\nasciitable brings in quite a few libraries including antlr... better\r\nhave the option to not use it, or at least structure it like that\r\n\r\n```\r\n+-de.vandermeer:asciitable:0.3.2\r\n[info] | +-de.vandermeer:ascii-utf-themes:0.0.1\r\n[info] | | +-de.vandermeer:skb-interfaces:0.0.1\r\n[info] |\n[…]\n.antlr:antlr4:4.5.1\r\n[info] | +-org.apache.commons:commons-lang3:3.4\r\n[info] | +-org.slf4j:slf4j-api:1.7.12 (evicted by: 2.0.7)\r\n[info] | +-org.slf4j:slf4j-api:2.0.7\r\n[info] |\r\n```",
"is_bot": false,
"headline": "extract `help` into it's own subproject to minify `core` dependencies…",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-06-27T08:32:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "173993a797814cc0ebba76144c527965d659e394",
"body": null,
"is_bot": false,
"headline": "NumericSteps etc.: some more functionality and tests from odb (#210)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-06-26T10:47:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38622dcbfd1265b097627362706e6735073421cf",
"body": "we don't need upickle - ujson is enough",
"is_bot": false,
"headline": "upgrade and minify dependencies (#208)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-06-24T10:13:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e37438bfd789096235af302fd286600764219fa4",
"body": "I first thought the behaviour was a bug - classic if you look at code\r\nthat you wrote yourself a year ago. So that this doesn't happen again\r\nnext year around, here's some docs and tests :)",
"is_bot": false,
"headline": "repeat.emit(condition) behaviour: document and add test (#207)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-06-18T11:32:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "817fd4613545ad74493cf64c8acdc2fa09ed9202",
"body": "* WIP\r\n\r\n* bring back GenericGraphTraversalTests and add/fix accordingly\r\n\r\n* even more tests\r\n\r\n* yet more tests and fixes\r\n\r\n* toSetMutable -> toSet in tests for readability",
"is_bot": false,
"headline": "bring back remaining tests and add/fix functionality accordingly (#206)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-28T11:19:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ff805c45a5bd32e6733865ee80ab9cc62faf83c",
"body": "* another name-refactor while we can: Lang -> language\r\n\r\n* languagebootstrap: language objects that aren't supposed to be used directly\r\n\r\nre bernhard's suggestion in https://github.com/joernio/flatgraph/pull/205#issuecomment-2133179751",
"is_bot": false,
"headline": "another name-refactor while we can: Lang -> language (#205)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-27T12:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2a324086f2bda1fcc2047a8b9f6cbe585f04472",
"body": null,
"is_bot": false,
"headline": "bring back LogicalStepsTests (and bring in some fixes) (#204)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-27T09:04:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdd65f0dff7dc6edc556f90e76a062434752c59f",
"body": "* fixup wiring for DomainClassesGenerator\r\n\r\n* refactor: Language -> language\r\n\r\ncleaning up the api while we still can...",
"is_bot": false,
"headline": "refactor: Language -> language (#203)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-24T15:36:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d910ef2b07f9aa3c8ba549b3f0d72801db1f670c",
"body": null,
"is_bot": false,
"headline": "scala 3.4.2 (#202)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-23T13:14:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66968a7cd4e25cfca7f821c6a8f38e84b1552dbf",
"body": null,
"is_bot": false,
"headline": "bring back other algorithm tests from odb (#201)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-22T10:37:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5c7da03e2fdf692f76ed6213dc411f6f08c119f",
"body": "…ience (#200)\n\n* generate `MyDomain.from(DiffGraphBuilder => DiffGraphBuilder)` convenience\r\n\r\n* use new convenience function",
"is_bot": false,
"headline": "generate `MyDomain.from(DiffGraphBuilder => DiffGraphBuilder)` conven…",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-21T17:47:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db51c5536f6cde54bfa8ebb50e847e59339fd072",
"body": null,
"is_bot": false,
"headline": "fixup unintended changes in last pr",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-21T08:17:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22c7cfec5c28f907066e9842aa06d31f39ec0eb5",
"body": "* don't fail for nonexisting inputs\r\n* allow to add more inputs in the build via a custom setting\r\n* add build's /built.sbt to the default inputs",
"is_bot": false,
"headline": "codegen cache fixes (#199)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-21T08:08:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92f4cc4b84bf6b8315971128995a75872376dcff",
"body": "…#198)\n\n* delete old leftover generated domain classes\r\n\r\n* add test to demo the codegen - documentation driven development ftw",
"is_bot": false,
"headline": "add test to demo the codegen - documentation driven development ftw (…",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-16T15:19:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44005cf16373dfaf629da8628071ebbfaf02b551",
"body": "* add a new `hierarchical` domain\r\n\r\n* add test case with repeat step and hierarchical domain\r\n\r\n* fmt",
"is_bot": false,
"headline": "add test case with repeat step and hierarchical domain (#197)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-07T12:49:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba9fdadf349e67299fd32c402321c00f3a130ae8",
"body": "…setup (#196)",
"is_bot": false,
"headline": "refactor testdomain schemas: move to non-flatgraph package, simplify …",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-07T11:06:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08009cec0eab4092d7093aae1c58b161ff0500f6",
"body": "* schema-conflicting node properties: only warn, don't error\r\n\r\nIllegal usage of node properties often roots in deserialising an old storage format, so we\r\ndon't want to error out but rather log a warning, and only do so once for each node/property combination.\r\n\r\n* fmt\r\n\r\n* add one more test case\r\n\r\n* fixup, cleanup",
"is_bot": false,
"headline": "schema-conflicting node properties: only warn, don't error (#195)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-06T14:06:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f17ba4c80bf99578dd6c99f0e32b271264b70ef0",
"body": "* WIP automatically invoke codegen for test schemas\r\n\r\n* only invoke codegen if inputs changed\r\n\r\n* Formatter: use $projectRoot/.scalafmt.conf if available",
"is_bot": false,
"headline": "automatically invoke codegen for test schemas (#194)",
"author_name": "Michael Pollmeier",
"author_login": "mpollmeier",
"committed_at": "2024-05-03T15:49:47Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 18,
"latest_release_at": "2026-07-17T13:48:32Z",
"latest_release_tag": "v0.1.34",
"releases_from_tags": true,
"days_since_last_push": 7,
"active_weeks_last_year": 16,
"days_since_latest_release": 7,
"mean_days_between_releases": 39
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 7,
"stars": 31,
"watchers": 10,
"fork_history": {
"days": [
{
"date": "2024-07-14",
"count": 1
},
{
"date": "2024-07-18",
"count": 1
},
{
"date": "2024-07-29",
"count": 1
},
{
"date": "2024-09-19",
"count": 1
},
{
"date": "2024-09-20",
"count": 1
},
{
"date": "2025-12-12",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_forks": 7
},
"star_history": null,
"open_issues_and_prs": 5
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 79232,
"source_files_sampled": 252,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 279,
"open_issues": 4,
"closed_ratio": 0.429,
"closed_issues": 3,
"closed_unmerged_prs": 76
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "mpollmeier",
"commits": 216,
"avatar_url": "https://avatars.githubusercontent.com/u/506752?v=4"
},
{
"type": "User",
"login": "bbrehm",
"commits": 49,
"avatar_url": "https://avatars.githubusercontent.com/u/29487190?v=4"
},
{
"type": "User",
"login": "maltek",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/1694194?v=4"
},
{
"type": "User",
"login": "johannescoetzee",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/25384566?v=4"
},
{
"type": "User",
"login": "ml86",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/2647694?v=4"
},
{
"type": "User",
"login": "SuperUserDone",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/13525489?v=4"
},
{
"type": "User",
"login": "max-leuthaeuser",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1417198?v=4"
},
{
"type": "User",
"login": "ricekot",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/16446369?v=4"
},
{
"type": "User",
"login": "eoliphan",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1065736?v=4"
},
{
"type": "User",
"login": "fabsx00",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1379115?v=4"
}
],
"contributors_sampled": 13,
"top_contributor_share": 0.747
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"pr.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 5,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 4,
"reason": "5 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "40d5bfa9c46a326162f5fa4632bd9db53208dcd6",
"ran_at": "2026-07-24T21:01:12Z",
"aggregate_score": 4.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T14:05:29Z",
"oldest_open_prs": [
{
"number": 302,
"created_at": "2025-01-27T13:13:05Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-17T13:48:32Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 216,
"created_at": "2024-07-02T10:38:28Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 319,
"created_at": "2025-03-26T08:33:19Z",
"last_comment_at": "2025-03-26T08:58:41Z",
"last_comment_author": "mpollmeier"
},
{
"number": 322,
"created_at": "2025-05-15T13:12:52Z",
"last_comment_at": "2025-05-15T14:40:25Z",
"last_comment_author": "mpollmeier"
},
{
"number": 345,
"created_at": "2025-08-31T13:07:20Z",
"last_comment_at": "2025-09-01T07:59:31Z",
"last_comment_author": "mpollmeier"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/joernio/flatgraph",
"host": "github.com",
"name": "flatgraph",
"owner": "joernio"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"security": 50,
"vitality": 73,
"community": 43,
"governance": 54,
"engineering": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 73,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"commits_last_year": 18,
"human_commit_share": 1,
"days_since_last_push": 7,
"active_weeks_last_year": 16
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "16/52 weeks with commits",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 16
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "18 commits in the last year",
"points": 11.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 18
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "5 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4",
"points": 4,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.1.34",
"releases_from_tags": true,
"days_since_latest_release": 7,
"mean_days_between_releases": 39
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~39 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 39
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 7,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 7 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 7
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 43,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"forks": 7,
"stars": 31,
"watchers": 10,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "31 stars",
"points": 24,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 31
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "7 forks",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 7
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "10 watchers",
"points": 5.3,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 10
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 13,
"top_contributor_share": 0.747
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 75% of commits",
"points": 5.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 75
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "13 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 13
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"merged_prs": 279,
"open_issues": 4,
"closed_issues": 3,
"issue_closed_ratio": 0.429,
"closed_unmerged_prs": 76
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "43% of issues closed",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 43
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "279/355 decided PRs merged",
"points": 30.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 279,
"decided": 355
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"followers": 84,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "joernio",
"public_repos": 34,
"account_age_days": 2129
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "84 followers of joernio",
"points": 13.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 84,
"login": "joernio"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "34 public repos, account ~5 yr old",
"points": 22.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 34
}
},
{
"code": "account_age_years",
"params": {
"years": 5
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"columnar-storage",
"database",
"graph",
"nosql",
"prototyping",
"scala"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 50,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "5 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 47,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.96,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "96 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 96,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Scala (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Scala"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Scala",
"largest_source_bytes": 79232,
"source_files_sampled": 252,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Scala (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Scala"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/252 source files over 60KB",
"points": 54.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 252,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-24T21:01:33.297019Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/joernio/flatgraph.svg",
"full_name": "joernio/flatgraph",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with joernio/flatgraph. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
