Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-23 01:09 UTC
justinlindh / bramble-go
Go SDK for the Bramble LoRa mesh: transports, RPC client, and event streaming for driving Bramble nodes
justinlindh/bramble-go holds a health index of 57 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (86/100) and lowest on Community & Adoption (27/100). It was last updated 3 days ago. A single contributor accounts for most of its recent work.
57
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
57
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Justin LindhPersonal account
11 followers16 public repossince May 2011
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/justinlindh/bramble-go | v0.12.2 | - | 22 | 4 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
71
Development activity
62Moderate
How it's scored
| 36/36 | Push recency — last push 3 days ago |
| 7.6/36 | Commit cadence — 11/52 weeks with commits |
| 18/18 | Commit volume — 138 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 138 |
| human_commit_share | 1 |
| days_since_last_push | 3 |
| active_weeks_last_year | 11 |
Release discipline
84Good
How it's scored
| 27/27 | Ships releases — 1 releases published |
| 36/36 | Release recency — latest release 4 days ago |
| 12.6/27 | Release cadence — cadence unknown (single release) |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 1 |
| latest_release_tag | v0.12.2 |
| releases_from_tags | no |
| days_since_latest_release | 4 |
| mean_days_between_releases | — |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
27
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
57Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | yes |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
53
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 38.2/38.3 | PR acceptance — 2/2 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 2 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship
48At risk
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 7.8/25 | Owner reach — 11 followers of justinlindh |
| 21/25 | Track record — 16 public repos, account ~15 yr old |
Inputs used
| followers | 11 |
| owner_type | User |
| is_verified | — |
| owner_login | justinlindh |
| public_repos | 16 |
| account_age_days | 5,541 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 4 days ago |
| 20/20 | Version history — 22 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/justinlindh/bramble-go |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 4 |
Engineering Quality
Are baseline engineering and documentation practices in place?
86
Engineering practices
84Good
How it's scored
| 24/24 | CI workflows — 6 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — .golangci.yml |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 2 out of 2 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
90Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://bramblemesh.org |
| 10/10 | Repository description |
| 10/10 | Topics — 4 topics |
| 0/10 | Wiki |
Inputs used
| topics | golang, lora, mesh-network, sdk |
| has_wiki | no |
| homepage | https://bramblemesh.org |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
39
Security posture
39At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 2.5/2.5 | CI-Tests — 2 out of 2 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3.9 |
Excluded from scoring (no data or not applicable): branch_protection, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
60
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 95 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.95 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
68Moderate
How it's scored
| 12.6/18 | One-command bootstrap — go.mod (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .golangci.yml |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 1/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/31 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 35,765 |
| source_files_sampled | 31 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
0GitHub stars
1contributors
138commits, last 12 months
3days since last push
1releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.9 / 10
3.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 2 out of 2 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 1 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 1 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 3
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/coder/websocket | v1.8.14 | go.mod |
| Go | go.bug.st/serial | v1.6.4 | go.mod |
| Go | tinygo.org/x/bluetooth | v0.14.0 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"golang",
"lora",
"mesh-network",
"sdk"
],
"is_fork": false,
"size_kb": 368,
"has_wiki": false,
"homepage": "https://bramblemesh.org",
"languages": {
"Go": 203687,
"Shell": 2748,
"JavaScript": 9437
},
"pushed_at": "2026-07-19T07:06:57Z",
"created_at": "2026-07-08T10:27:28Z",
"owner_type": "User",
"updated_at": "2026-07-19T07:07:02Z",
"description": "Go SDK for the Bramble LoRa mesh: transports, RPC client, and event streaming for driving Bramble nodes",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Justin Lindh",
"type": "User",
"login": "justinlindh",
"company": null,
"location": "Henderson, NV",
"followers": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/802578?v=4",
"created_at": "2011-05-21T20:00:27Z",
"is_verified": null,
"public_repos": 16,
"account_age_days": 5541
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.12.2",
"kind": "patch",
"published_at": "2026-07-18T06:02:20Z"
}
],
"recent_commits": [
{
"oid": "e6b2f00c12ee90a4ebd4102c5d13176cc3c42e19",
"body": "* ci(ci): enforce PR template section headers on pull requests\n\nAdd a required PR Template workflow that reads the level-2 section\nheaders from .github/PULL_REQUEST_TEMPLATE.md and verifies each one\nappears verbatim, with its formatting, in the pull request body. It\nruns on opened, edited, reopened,\n[…]\nLs, and trailers\nthat routinely exceed that, so drop the gate, matching the bramble repo\nwhich already disables both rules.\n\n---------\n\nCo-authored-by: digits-bot <digits-bot@users.noreply.github.com>",
"is_bot": false,
"headline": "ci(ci): enforce PR template section headers on pull requests (#2)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-19T07:06:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7aa8a6919de46de0167890172eb273dd82576c0d",
"body": "…tover (#1)\n\n* ci: port claude reviews, PR template, squash-aware release, runner cutover\n\nBring bramble-go in line with the mechanisms built on the main bramble\nrepo:\n\n- Add .github/workflows/claude.yml for @claude PR reviews, with a single\n --allowedTools flag (repeated flags replace each other) \n[…]\n(ci): pass allowed tools to the PR reviewer in one flag\n\nRepeated --allowedTools flags replace each other instead of accumulating,\nso only the last rule survived. Same defect and fix as the main repo.",
"is_bot": false,
"headline": "ci: port claude reviews, PR template, squash-aware release, runner cu…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-18T06:01:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0c3dbd7e5839abc31468fd5d4d4de3b2ae1205e",
"body": "…coords)",
"is_bot": false,
"headline": "chore(go-public): restore + harden internal-refs gate (device addrs, …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-18T01:04:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68711933ea5813fcf32758fd51254f95f473515f",
"body": null,
"is_bot": false,
"headline": "chore(go-public): restore internal-refs gate after history rewrite",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-17T21:18:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eae017694cf9c0429dc70a57634028da0a9404f9",
"body": "…gate strict\n\nclient_test.go WiFi/OTA mock IPs 192.168.1.x -> 192.0.2.x (RFC5737 doc\nrange); assertions updated to match. The gate now fails on any private\n192.168.x except the ESP32 SoftAP 192.168.4.x, scans markdown too, and\ndrops the stale .gitea exclusion (which is clean).",
"is_bot": false,
"headline": "chore(go-public): genericize test IPs to RFC5737, make internal-refs …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-17T09:49:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a608ea850b582ae0ed4daf1ed9e7827a33d5031",
"body": "Rename the Go module path from github.com/justinlindh/bramble-go to\ngithub.com/justinlindh/bramble-go across go.mod, all imports, README, and\ndocs. Scrub internal-infrastructure references for the public mirror.\n\nPort the .gitea workflows to .github/workflows on GitHub-hosted\nubuntu-latest runners (go quality, commitlint, semantic-release via the\nGitHub plugin) and add a check-no-internal-refs gate script plus workflow.\nThe .gitea workflows stay in place as a frozen mirror-side config.",
"is_bot": false,
"headline": "chore: rename module to github.com/justinlindh/bramble-go and port CI",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-17T09:30:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b99528f7f79223eb03bb2a06a209431487624b74",
"body": "Add Broadcast bool and Channel int to Message so callers can classify DM vs broadcast vs channel on the live onMessage path, which carries these fields but no \"to\". Additive and non-breaking.",
"is_bot": false,
"headline": "feat(types): expose broadcast and channel routing on Message (#35)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-10T08:07:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2af474aa116d6a706f60a4a4b0259f5d2f86f6d1",
"body": "…o + parity KAT' (#34) from feat/trust-anchor-client into main",
"is_bot": false,
"headline": "Merge pull request 'feat(anchor): trust-anchor client methods + crypt…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-06T21:59:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15737104c8207748292a217e96941a7111345a65",
"body": "…ity KAT\n\nAdds the operator-side trust-anchor surface the webapp already has:\n- Client.SetAnchor / AnchorStatus / SetEndorsement RPC wrappers, plus\n ed25519_pub on IdentityResponse and the AnchorStatusResponse type.\n- anchor.go: Ed25519 anchor keygen, the 58-byte 'bramble-endorse-v1'\n endorsement \n[…]\nhared\n fixed vector reproduces the firmware's and webapp's exact 64-byte\n signature and anchor pubkey, so a cert this SDK signs is byte-accepted by\n the device (verified end-to-end on a Heltec V4).",
"is_bot": false,
"headline": "feat(anchor): trust-anchor client methods, crypto, and cross-impl par…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-07-06T21:58:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10a37047056d73c27f1bec4aa767ea67b8ee226b",
"body": "…es, GPS casing, transporttest, coder/websocket)' (#33) from feat/api-polish into main",
"is_bot": false,
"headline": "Merge pull request 'feat(api): pre-1.0 API surface polish (Get prefix…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-13T00:32:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "163e914d1a5a1018019642eef49b0ec2ade47581",
"body": "…ttest, coder/websocket)\n\nBreaking changes, intentionally landed before any public release:\n\n- Drop Get prefixes on all client query methods: WifiStatus, Battery,\n GPSPosition, BeaconPolicy, AudioStatus, StorageInfo, Diagnostics,\n AuthToken, TrafficDebug, TrafficEvents (and the matching\n TrafficD\n[…]\n directive from the 1.26.1 patch pin to a 1.25.0 floor.\n- Update README, docs/API.md, and examples to the new surface; add the\n missing OnPeerLocation/OnIdentityChange rows to the callback reference.",
"is_bot": false,
"headline": "feat(api): pre-1.0 surface polish (Get prefixes, GPS casing, transpor…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T23:54:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "199545b12c954e6bab80f2ecaad0e02382b573d2",
"body": "…from chore/repo-hygiene into main",
"is_bot": false,
"headline": "Merge pull request 'chore: repo hygiene pass (workstream 0.4)' (#32) …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:58:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3c73ca3d46e90752702d859b133a15e6ba2ccc8",
"body": "SDKVersion still said 0.5.0 while release tags reached v0.9.0. Release\nnotes are generated by semantic-release on the Gitea releases page, and\nthe in-repo changelog had drifted (entries for v0.6.0 through v0.9.0 sat\nunder 'Unreleased'); the README now points at Gitea releases instead.",
"is_bot": false,
"headline": "chore(release): bump SDKVersion to 0.9.0 and drop stale CHANGELOG.md",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "945b8ca899fd5800833b5e1747cd3a903408b59d",
"body": null,
"is_bot": false,
"headline": "chore: ignore stray bramble binary at repo root",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba02449348fbe1d88c0c276183772db8820f59d6",
"body": "- install golangci-lint from the v2 module path with a cached version\n marker so the runner replaces the stale v1.64.8 binary\n- add a 'go mod tidy -diff' step to the vet job\n- update the README lint contract from v1.64.8 to v2.11.4",
"is_bot": false,
"headline": "ci: pin golangci-lint v2.11.4 and check go.mod tidiness",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68128b111866541531b3db7fd51dfafd263fc5f5",
"body": "- .golangci.yml: v2 schema, 'standard' default linter set (previous four\n linters plus errcheck)\n- explicitly discard deferred Close errors in tests and examples (errcheck)\n- drop redundant embedded-field selector and use a tagged switch in\n transport/ble.go (staticcheck QF1008/QF1003)\n- gofmt types.go",
"is_bot": false,
"headline": "chore(lint): migrate golangci-lint config to v2 schema and fix findings",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f4cf1fe2278168bc04f042639bf8b8d22f32fa9",
"body": "The Send signature gained a context parameter in 0c57012 but this\ncallsite was missed, so 'go test ./transport' failed to compile on main.",
"is_bot": false,
"headline": "fix(test): pass context to BLE Send in reconnecting test",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-06-12T06:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcd83c687767f278a3aa2e172fa79c0923ae010b",
"body": "…IdentityChange notifications' (#31) from task/c45-add-sdk-handlers-for-onpeerlocation-and-oniden-cb0d086e into main",
"is_bot": false,
"headline": "Merge pull request 'feat(sdk): add handlers for onPeerLocation and on…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-26T02:38:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31bfba58a31c4bf8adf46ac255e10af26b15103c",
"body": "…ications\n\n- Add PeerLocationEvent and IdentityChangeEvent types to types.go\n- Add onPeerLocationFn and onIdentityChangeFn callback fields to Client\n- Handle bramble.onPeerLocation (null params) and bramble.onIdentityChange\n in notifyLoop\n- Add OnPeerLocation and OnIdentityChange methods for callba\n[…]\nnctional option wiring\n\nFirmware sends onPeerLocation with null params on every received peer\nlocation update; onIdentityChange carries new_address+reason on address\ncollision re-keying. Resolves C45.",
"is_bot": false,
"headline": "feat(sdk): add handlers for onPeerLocation and onIdentityChange notif…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-25T18:05:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3c95fffc017e03597446c9f8bcbdc2bc6998f67",
"body": "…opulate changelog (audit D27, D30)' (#30) from docs/audit-d27-api-reference into main",
"is_bot": false,
"headline": "Merge pull request 'docs: add 15 missing public methods to API.md + p…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-24T17:53:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fc44b646edcbec3a3764d2a3e15650968073ba7",
"body": "…D30)",
"is_bot": false,
"headline": "docs: populate [Unreleased] changelog with March 2026 entries (audit …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-24T17:50:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b793928d7ebcd4062ae3a04fdbbef1fa7655d97",
"body": null,
"is_bot": false,
"headline": "docs: add 15 missing public methods to API.md (audit D27)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-24T17:50:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dee95e5b8982375084796fa64d19209b0af501dd",
"body": "…' (#29) from task/c43-add-getauthtoken-to-ble-transport-for-symmetry-f477ec20 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/29",
"is_bot": false,
"headline": "Merge pull request 'fix(transport): add GetAuthToken to BLE transport…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T20:01:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f7518de458b0d3ea9f556f92b2803518ea3bff4",
"body": "…nd fixtures' (#28) from task/c38-fix-location-tier-mismatch-between-cli-docs-an-bff62abc into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/28",
"is_bot": false,
"headline": "Merge pull request 'fix(location): align SDK location tier examples a…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:47:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f27a8cdf6e291906a4cbf693ef15fab6ff291b91",
"body": "…hooks' (#27) from task/c40-add-ondisconnect-onreconnect-hooks-to-ble-tran-54135d8f into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/27",
"is_bot": false,
"headline": "Merge pull request 'fix(transport): add BLE OnDisconnect/OnReconnect …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:47:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0f1fa8b83d3a1a24d5d6eac18fc9052dde677fd",
"body": null,
"is_bot": false,
"headline": "fix(transport): add BLE GetAuthToken for transport symmetry",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:46:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6b233b56b36e0810504d8d69965bf8bc0f0c9e4",
"body": null,
"is_bot": false,
"headline": "fix(location): align sdk location tier examples and fixtures",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:46:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa6bbc6d9e4f123bfc6fcf8a940a3f652d01699f",
"body": "… (#26) from task/c42-fix-websocket-send-to-respect-caller-context-i-840915f8 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/26",
"is_bot": false,
"headline": "Merge pull request 'fix(transport): propagate caller context in Send'…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:46:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69131c7ce1e7352534ecafe29ae1a4f5dd07f395",
"body": "…ct coverage (T29)' (#24) from test/ble-auth-coverage into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/24",
"is_bot": false,
"headline": "Merge pull request 'test(transport): add BLE auth handshake and Conne…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:45:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "211d343101b21f0b7bbc9b36926980e45997034a",
"body": "… for godoc' (#25) from task/c41-fix-broadcast-deprecation-comment-to-godoc-for-70779ecf into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/25",
"is_bot": false,
"headline": "Merge pull request 'fix(client): format Broadcast deprecation comment…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:45:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72d9bfaee2f73b30456b6631f6d71a1f8477081e",
"body": null,
"is_bot": false,
"headline": "fix(transport): add BLE disconnect and reconnect hooks",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c570126fdb68662ed79bd267b91daa21448aa66",
"body": null,
"is_bot": false,
"headline": "fix(transport): propagate caller context through Send",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:44:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "894a9a4a703f93fd750f112dba364381dc04941d",
"body": null,
"is_bot": false,
"headline": "fix(client): format Broadcast deprecation as godoc",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-22T19:41:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "608e858b99f350f20ea4de65c6b9aa8ae8babc27",
"body": "Add five new tests to improve coverage of authenticate() (from 0%)\nand Connect() beyond the already-connected guard:\n\n- TestBLEAuthenticate_NoToken: authenticate() exits immediately with no\n auth token configured (covers the early-return path)\n- TestBLEAuthenticate_SendFails: authenticate() wraps E\n[…]\nh)\n\nThe remaining authenticate() paths (Receive timeout, validateAuthResponse)\nand Connect() scan/GATT paths require real BLE hardware or a production-code\nabstraction hook and are not exercised here.",
"is_bot": false,
"headline": "test(transport): add BLE auth handshake and Connect coverage (T29)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-19T21:31:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb96e9890e35e9b37f6625927d2b4d7075392005",
"body": "…23) from fix/audit-c31-c34-c37 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/23",
"is_bot": false,
"headline": "Merge pull request 'fix(sdk): address audit findings C31-C34, C37' (#…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-19T18:12:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07c377373b23d93e0c4e0a35e0a11dc756cd0b85",
"body": "C31: SetNodeName godoc now says max 32 chars (matching firmware)\nC32: LocationEvent.Tier changed from int to LocationTier (string type)\n with constants and UnmarshalJSON handling both int and string\n wire formats (firmware notification sends int, RPCs send string)\nC33: ProbeComplete expanded\n[…]\nKhz/FreqMhz fields\n retained as deprecated with fallback in SetRadio()\nC37: GpsPosition.Timestamp documented as Unix seconds (not ms) to clarify\n the naming inconsistency with other _ms fields",
"is_bot": false,
"headline": "fix(sdk): address audit findings C31-C34, C37",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-19T18:09:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a38def1f6502f051d6fdd9cacec7027e92a743e7",
"body": "… in DeliveryEvents' (#16) from fix/delivery-events-param-case into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/16",
"is_bot": false,
"headline": "Merge pull request 'fix(client): use snake_case since_event_seq param…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T19:19:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8537d3a6e5a953092690ab5db5f9d8a28ce4dd98",
"body": "… with payload context' (#17) from fix/notify-decode-logging into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/17",
"is_bot": false,
"headline": "Merge pull request 'fix(notify): log JSON decode errors in notifyLoop…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T19:19:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ce84a5b9fa8c5b6818ac00609abc34c8f0ccfa9",
"body": "… *int (C25)' (#18) from fix/sendresult-channel-pointer into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/18",
"is_bot": false,
"headline": "Merge pull request 'fix(types): change SendResult.Channel from int to…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T19:19:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1eef2f5debf4abca3b1e85324afe0df96fc14ddc",
"body": "…orted across all transports' (#20) from fix/transport-token-encapsulation into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/20",
"is_bot": false,
"headline": "Merge pull request 'refactor(transport): make auth token fields unexp…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T19:19:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df771f9e9ef39baf80b34914896b31cb31c1be35",
"body": null,
"is_bot": false,
"headline": "ci(commitlint): pin to 19.6.0 to avoid tinyexec ESM breakage (#22)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T19:07:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edd64997dc7a54a9e0c48972ccae1497888bff6f",
"body": "…nsports\n\nWebSocket.AuthToken and Serial.AuthToken were exported (public) fields\nwhile BLE kept its token unexported via BLEConfig.AuthConfig.\n\nThis change:\n- Renames Serial.AuthToken → authToken (unexported)\n- Renames WebSocket.AuthToken → authToken (unexported)\n- Adds GetAuthToken() accessor metho\n[…]\ne private field names\n\nAll three transports now use consistent unexported encapsulation\nfor auth token storage. Access is via SetAuthToken/GetAuthToken\nmethods or the WithAuthToken constructor option.",
"is_bot": false,
"headline": "refactor(transport): make auth token fields unexported across all tra…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T18:08:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0b6effe100ce1bc633343e6b858735f58fd8089d",
"body": "- Add notifyDecode() helper that logs a structured slog.Warn on\n unmarshal failure, including up to 512 bytes of the raw payload\n- Add OnDecodeError() callback so callers can observe decode failures\n without affecting the connection\n- Replace silent if json.Unmarshal(...) == nil patterns throughou\n[…]\nfires, contains method/error/payload, and connection stays\n alive for subsequent valid notifications\n- Add TestClient_OnDecodeError_PayloadTruncated: verifies payload\n snippet is capped at 512 bytes",
"is_bot": false,
"headline": "fix(notify): log JSON decode errors in notifyLoop with payload context",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T18:08:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "957ba8ee8b7dc94c58b0d90c1bf8a9384027c00d",
"body": "Zero value int was ambiguous: callers could not distinguish 'no\nchannel info returned by firmware' (should be nil) from 'channel\nindex 0' (a valid channel). Using *int resolves this:\n- nil → channel field absent in firmware response\n- *int == 0 → firmware explicitly returned channel 0\n- *int == N →\n[…]\nresence should use:\n if res.Channel != nil { ch := *res.Channel }\n\nThis is a BREAKING change (bumps to next minor). Existing callers\nthat compare .Channel == 0 must be updated to check for nil first.",
"is_bot": false,
"headline": "fix(types): change SendResult.Channel from int to *int",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T18:08:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34de8aa265215f70bfcb5cedb68e8845b955a4e6",
"body": "Change sinceEventSeq to since_event_seq to match the snake_case\nconvention used by all other SDK methods. Firmware accepts both\nbut consistency requires snake_case.\n\nFirmware RPC handler (rpc_methods.c:221-222) already supports\nboth keys; this change aligns the SDK with the documented convention.",
"is_bot": false,
"headline": "fix(client): use snake_case since_event_seq param in DeliveryEvents",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T18:08:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "015f3abcf483b7d08ae19c2e95f55d25336cfd4c",
"body": null,
"is_bot": false,
"headline": "ci(commitlint): fix stale cache causing tinyexec module-not-found (#21)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T18:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "095da2f0d4e1fe82f67f3ae78bc7aafb4a67ba73",
"body": "…onal Option pattern (C23)' (#19) from fix/ble-options-pattern into main",
"is_bot": false,
"headline": "Merge pull request 'feat(transport): refactor NewBLE to accept functi…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T17:55:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "772abe89423d0021afb0b892cd7411f1062d8d96",
"body": "Refactors NewBLE(BLEConfig) to NewBLE(deviceName string, opts ...Option)\nto match the variadic functional pattern used by NewSerial and NewWebSocket.\n\n- Added applyBLE(*BLE) to the Option interface and option struct\n- WithAuthToken now applies to BLE transport (was silently ignored before)\n- Added W\n[…]\newBLE_DefaultScanTimeout, TestBLENewBLE_MultipleOptions\n\nFixes audit finding C23 (HIGH): BLE transport did not accept Options pattern,\ncausing WithAuthToken() to silently not apply to BLE connections.",
"is_bot": false,
"headline": "feat(transport): refactor NewBLE to accept functional Option pattern",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-13T17:51:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "588762e5f9185228ea408e897a5b5a5a18f0ffc9",
"body": "…DME' (#15) from fix/doc-audit-d14-d19 into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/15",
"is_bot": false,
"headline": "Merge pull request 'docs: fix SetNodeName max chars, add examples REA…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-10T17:34:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78a666126d4cc3fda8683afe59db16be82693b36",
"body": "Audit findings D14, D19:\n- API.md: SetNodeName documented as max 8 chars but firmware\n defines BRAMBLE_NODE_NAME_MAX=32\n- examples/: add README with directory index and usage instructions",
"is_bot": false,
"headline": "docs: fix SetNodeName max chars (8→32), add examples README",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-10T17:19:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "669f6cc6cdd4e9ff949c52f3e716864ccd72677d",
"body": "…ransports' (#14) from feature/transport-auth-coverage into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/14",
"is_bot": false,
"headline": "Merge pull request 'test(transport): add auth token coverage across t…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-09T17:14:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20d45a8842313c8beeff3cad3c0b6ac085a246b9",
"body": null,
"is_bot": false,
"headline": "test(transport): cover auth token setters across transports",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-09T17:12:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7eb275022a697c9f98a267e36b7245bef413a8e",
"body": "…(#13) from ci/add-dispatch-trigger into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/13",
"is_bot": false,
"headline": "Merge pull request 'ci: add workflow_dispatch trigger to go-quality' …",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-08T00:05:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ad38fe08339dbce5b7f0177ef204ac148514a5e",
"body": null,
"is_bot": false,
"headline": "ci: replace setup-go with direct toolcache usage, download fallback",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-08T00:04:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d57d2800e1168bcbeb1ab01dbcd864a57f3078c",
"body": null,
"is_bot": false,
"headline": "ci: fix toolcache permissions for setup-go on self-hosted runners",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-08T00:01:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c62cfb26660cdd1fc5ae4c677d5f544b9bd215a",
"body": null,
"is_bot": false,
"headline": "ci: retrigger after runner image update",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T23:56:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b92bbe6c7931711e8ce80fd283338004cc17452c",
"body": null,
"is_bot": false,
"headline": "ci: add workflow_dispatch trigger to go-quality",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T23:54:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec9bdb09a67a3c050001f2e436f15dfb61fea1dc",
"body": "…d/go-1.26.1 into main",
"is_bot": false,
"headline": "Merge pull request 'build: bump Go minimum to 1.26.1' (#12) from buil…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T23:18:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d16063c20493deecc27c62fd0af8300753b73c24",
"body": "Fixes GO-2026-4599, GO-2026-4600, GO-2026-4601, GO-2026-4602\n(crypto/x509 and os/net/url stdlib vulnerabilities).",
"is_bot": false,
"headline": "build: bump Go minimum to 1.26.1",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T23:17:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c0b96d18bc5a5e1c27fd08b9de8304018379f34",
"body": null,
"is_bot": false,
"headline": "feat(client): add GetAuthToken() for serial pairing (#11)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T21:40:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d62de8ccd3da5fb88da1a7d3a76d18c25058d7b",
"body": null,
"is_bot": false,
"headline": "transport: add SetAuthToken to Transport interface (#10)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T20:05:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec3f2c653e39f9cfe6f50216467daaacc105f359",
"body": null,
"is_bot": false,
"headline": "Add Go SDK wrappers for missing firmware RPC methods (#9)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T20:01:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e27650f8b16e8979bd957f24353c9b683ff7f5b",
"body": null,
"is_bot": false,
"headline": "Fix IsCompatible semver comparison for protocol versions (#6)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T19:57:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2a8f90416c16d9d50375bdc07f6145aa5fbe1c4",
"body": null,
"is_bot": false,
"headline": "feat(client): expose full setLocationContact fields (#8)",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T19:57:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cbced984eac95f3f0dd0659338f296ddaf8056e",
"body": "…imestamp overflow (#7)",
"is_bot": false,
"headline": "fix(types): remove unused LocationContact and prevent LocationEvent t…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-07T19:57:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1296798d8aaae685580be478a42d79d156bcfeb",
"body": "…cket + serial' (#5) from feature/ws-serial-auth-token into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/5",
"is_bot": false,
"headline": "Merge pull request 'feat(transport): add shared auth option for webso…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T22:06:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6a4b0702cd80337a4969032bcffa05b9eca4321",
"body": null,
"is_bot": false,
"headline": "feat(transport): share auth option across serial and websocket",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T21:10:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97e696c098d85e859b7ad3181788aa49437329d5",
"body": "…date channel-critical broadcast' (#4) from feature/serial-and-broadcast-coverage into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/4",
"is_bot": false,
"headline": "Merge pull request 'test: increase serial transport coverage and vali…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T20:54:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2bab878fc69ebc509e286bf3b8b3f6b7ae0bf44",
"body": "…adcast",
"is_bot": false,
"headline": "test: raise serial transport coverage and assert critical channel bro…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T20:53:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7842e7619cdac8b7e85267f320ab3b9f12c6257",
"body": "Addresses audit findings from 2026-03-06 Test Coverage Round 3:\n- Serial transport: Connect, sendAuth, readAuthResponse, reader, WithAuthToken\n all brought from 0% to 59-100% coverage\n- BroadcastOnChannelCritical: 0% to 100% coverage\n- Transport package overall: 55.7% to 66.8%",
"is_bot": false,
"headline": "test: add serial transport and BroadcastOnChannelCritical coverage",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T20:50:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bde80292d6c08a76e270e1ad6b0f27a4bfcf88ed",
"body": "…m docs/fix-stale-api-doc-comments into main",
"is_bot": false,
"headline": "Merge pull request 'docs: fix 5 stale comment/API doc items' (#3) fro…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T09:17:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da8dbe9093033789b62796a60d7f3ba35ce8bf7d",
"body": null,
"is_bot": false,
"headline": "docs: fix stale BLE/API comments and type snippets",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T08:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "095647ff3f61a7276e7427a3e623c15848e82ac2",
"body": "Firmware already returns status (none/sent/delivered/failed) in\nbramble.getMessages — the SDK just wasn't capturing it.",
"is_bot": false,
"headline": "types: add Status field to Message struct",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-06T08:25:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef693efbd0cb89e5240c29f22ed23bd10896e107",
"body": "…ure/go-quality-ci into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/2",
"is_bot": false,
"headline": "Merge pull request 'ci: add go quality required gates' (#2) from feat…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:34:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a9ed13cc4dad0b1dc7488587868416c98b9d33e",
"body": "This reverts commit d46c02f430eb80de0b8184344368436c2102e089.",
"is_bot": false,
"headline": "Revert \"test(ci): inject intentional ineffassign lint failure\"",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:32:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d46c02f430eb80de0b8184344368436c2102e089",
"body": null,
"is_bot": false,
"headline": "test(ci): inject intentional ineffassign lint failure",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:31:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbd9bbd677a9069124c5dd0616655210a4091c87",
"body": null,
"is_bot": false,
"headline": "ci(go): run golangci-lint via runner-built binary",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:22:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "168a21ee213f633dd06410f85274e54f9294d720",
"body": null,
"is_bot": false,
"headline": "ci(go): install golangci-lint via goinstall for Go 1.25 compatibility",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:19:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0df44f7c59f8cd5625d30a9e0865ebd67ebf0a6e",
"body": null,
"is_bot": false,
"headline": "ci(go): bump golangci-lint to v1.64.8 for Go 1.25 compatibility",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:13:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "562da4f2d30ab90cafdf5e8bcd21e9e09acb795b",
"body": null,
"is_bot": false,
"headline": "ci: stop forcing missing commitlint config file",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T21:02:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "478f6f8fbea30d45e930dcb94c22a47cdf377f5c",
"body": null,
"is_bot": false,
"headline": "ci: use runner-local caches and fix commitlint resolution",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:59:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce6f731e66119ff4eadc242daf6ccc8ecdcca482",
"body": null,
"is_bot": false,
"headline": "ci: build golangci-lint with runner go toolchain",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:56:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c93a9bb16fd8ec2923fa558db1ca2a6f3c327bc2",
"body": null,
"is_bot": false,
"headline": "ci: add deterministic workflow caches for go and node tools",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:48:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb684b84420afe89ecf8fac1c83b25ae59f4386a",
"body": null,
"is_bot": false,
"headline": "fix: resolve go-quality lint findings for CI gate",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:42:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd5bc625fce6f3f533f7d992e001998c9551f0b7",
"body": null,
"is_bot": false,
"headline": "ci: add required go quality workflow gates",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:40:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74c76ac305e8161d7b1328f1a6f7c891e5c30b29",
"body": null,
"is_bot": false,
"headline": "ci: define local go quality command contract",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e38c193ff5b9f420d92bc0175c565c4de2ebb164",
"body": "… fix/ci-runner-recovery into main\n\nReviewed-on: https://github.com/justinlindh/bramble-go/pulls/1",
"is_bot": false,
"headline": "Merge pull request 'ci: validate runner recovery workflows' (#1) from…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:32:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e45b4f26551fdbd2aea7ec074e835fa677483e4a",
"body": null,
"is_bot": false,
"headline": "ci: make release workflow routable and fail-fast",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:28:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be7f849abcf6a1db4fb3b599398d34c92648b3c7",
"body": null,
"is_bot": false,
"headline": "ci: fix commitlint runner and deterministic event handling",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T20:27:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a9e486dabd3ff30a54e1923f821ee81c102a0a4",
"body": null,
"is_bot": false,
"headline": "fix(protocol): retry RPC sends during websocket reconnect",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T07:02:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4549b6cd1fd6258e5491b2b6851314e7af62eff",
"body": null,
"is_bot": false,
"headline": "docs(api): include GetDiagnostics in query methods",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-04T06:10:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97a0dc79265b76c6faaef9693dc84a29becb1f5d",
"body": null,
"is_bot": false,
"headline": "Merge auth-token-support: transport auth token support",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-03T00:44:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83c3b38bed74ebc5085ab07009f212ca1f10f34e",
"body": null,
"is_bot": false,
"headline": "feat(transport): add auth token support to all transports",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T18:52:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dda3046b3b6475984899314a62d123923d6dcab",
"body": null,
"is_bot": false,
"headline": "Merge readme-rework: streamlined README with API docs split",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T10:07:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97740d1d660bb5576156516a6016b8257c563484",
"body": null,
"is_bot": false,
"headline": "docs(readme): streamline README and move full API reference",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T09:51:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f6d8d68138647b919938b517495cd4923c0d497",
"body": "…lic release",
"is_bot": false,
"headline": "docs(readme): replace internal URLs with YOUR-ORG placeholder for pub…",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T06:50:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d5dcb756644ef227a70ad856871573a5f0f8633",
"body": null,
"is_bot": false,
"headline": "docs(readme): remove internal note and fix license section",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T06:49:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a9eff6e0ea163eb5d3cd42a037026cddf016d24",
"body": null,
"is_bot": false,
"headline": "chore: clean up repo for public release",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-02T06:47:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea6b565b5de1dcb31322c6b76742c9ed87b86121",
"body": null,
"is_bot": false,
"headline": "feat(sdk): align with bramble.getDiagnostics RPC and bump SDK minor",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-01T23:37:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42e42c3e84191323fa960b61cc34ecb5ceaf446f",
"body": null,
"is_bot": false,
"headline": "docs(readme): document missing client APIs and callbacks",
"author_name": "Justin Lindh",
"author_login": "justinlindh",
"committed_at": "2026-03-01T20:34:17Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 138,
"latest_release_at": "2026-07-18T06:02:20Z",
"latest_release_tag": "v0.12.2",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 11,
"days_since_latest_release": 4,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/justinlindh/bramble-go",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/justinlindh/bramble-go",
"is_deprecated": false,
"latest_version": "v0.12.2",
"repository_url": "https://github.com/justinlindh/bramble-go",
"versions_count": 22,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T06:01:15Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 35765,
"source_files_sampled": 31,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/coder/websocket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.14"
},
{
"name": "go.bug.st/serial",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.4"
},
{
"name": "tinygo.org/x/bluetooth",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.14.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 2,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "justinlindh",
"commits": 138,
"avatar_url": "https://avatars.githubusercontent.com/u/802578?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"claude.yml",
"commitlint.yml",
"go-quality.yml",
"internal-refs.yml",
"pr-template.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "e6b2f00c12ee90a4ebd4102c5d13176cc3c42e19",
"ran_at": "2026-07-23T01:09:28Z",
"aggregate_score": 3.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T07:08:34Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-19T07:06:58Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/justinlindh/bramble-go",
"host": "github.com",
"name": "bramble-go",
"owner": "justinlindh"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 39,
"vitality": 71,
"community": 27,
"governance": 53,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 71,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"commits_last_year": 138,
"human_commit_share": 1,
"days_since_last_push": 3,
"active_weeks_last_year": 11
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "11/52 weeks with commits",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 11
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "138 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 138
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 84,
"inputs": {
"releases_count": 1,
"latest_release_tag": "v0.12.2",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 27,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 2,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "2/2 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 2,
"decided": 2
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"followers": 11,
"owner_type": "User",
"is_verified": null,
"owner_login": "justinlindh",
"public_repos": 16,
"account_age_days": 5541
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "11 followers of justinlindh",
"points": 7.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 11,
"login": "justinlindh"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "16 public repos, account ~15 yr old",
"points": 21,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 16
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/justinlindh/bramble-go"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "22 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 22
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"golang",
"lora",
"mesh-network",
"sdk"
],
"has_wiki": false,
"homepage": "https://bramblemesh.org",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://bramblemesh.org",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 39,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "2 out of 2 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 60,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.95,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "95 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 95,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 35765,
"source_files_sampled": 31,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/31 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 31,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-23T01:09:34.271302Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/justinlindh/bramble-go.svg",
"full_name": "justinlindh/bramble-go",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.