Public recordGood
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 06:19 UTC
libp2p / go-libp2p-kad-dht
A Kademlia DHT implementation on go-libp2p
libp2p/go-libp2p-kad-dht holds a health index of 75 out of 100, placing it in the Good band. It scores highest on Vitality (95/100) and lowest on AI Readiness (58/100). It was last updated 3 days ago. 3 contributors account for most of its recent work.
75
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
75
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
libp2pOrganization
1,328 followers275 public repossince Sep 2015
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/libp2p/go-libp2p-kad-dht | v0.42.1 | - | 106 | 5 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
95
Development activity
91Excellent
How it's scored
| 36/36 | Push recency — last push 3 days ago |
| 27/36 | Commit cadence — 39/52 weeks with commits |
| 18/18 | Commit volume — 144 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 144 |
| human_commit_share | 0.93 |
| days_since_last_push | 3 |
| active_weeks_last_year | 39 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 85 releases published |
| 36/36 | Release recency — latest release 5 days ago |
| 27/27 | Release cadence — a release every ~20.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 85 |
| latest_release_tag | v0.42.1 |
| releases_from_tags | no |
| days_since_latest_release | 5 |
| mean_days_between_releases | 20.8 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
63
Popularity & adoption
74Good
How it's scored
| 45/60 | Stars — 594 stars |
| 20.1/25 | Forks — 259 forks |
| 9/15 | Watchers — 42 watchers |
Inputs used
| forks | 259 |
| stars | 594 |
| watchers | 42 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
82
How it's scored
| 36/54 | Bus factor — 3 contributor(s) cover half of all commits |
| 17.3/22.5 | Commit distribution — top contributor authored 23% of commits |
| 13.5/13.5 | Contributor breadth — 81 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 82 contributing companies or organizations |
Inputs used
| bus_factor | 3 |
| contributors_sampled | 81 |
| top_contributor_share | 0.232 |
How it's scored
| 40.4/46.8 | Issue resolution — 86% of issues closed |
| 30.1/38.3 | PR acceptance — 720/915 decided PRs merged |
| 6/15 | OpenSSF Scorecard: Code-Review — Found 13/27 approved changesets -- score normalized to 4 |
Inputs used
| merged_prs | 720 |
| open_issues | 49 |
| closed_issues | 311 |
| issue_closed_ratio | 0.864 |
| closed_unmerged_prs | 195 |
Ownership & stewardship
78Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 22.5/25 | Owner reach — 1,328 followers of libp2p |
| 25/25 | Track record — 275 public repos, account ~10 yr old |
Inputs used
| followers | 1,328 |
| owner_type | Organization |
| is_verified | — |
| owner_login | libp2p |
| public_repos | 275 |
| account_age_days | 3,956 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 5 days ago |
| 20/20 | Version history — 106 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/libp2p/go-libp2p-kad-dht |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 5 |
Engineering Quality
Are baseline engineering and documentation practices in place?
67
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 7 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
65Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://github.com/libp2p/specs/tree/master/kad-dht |
| 10/10 | Repository description |
| 10/10 | Topics — 4 topics |
| 0/10 | Wiki |
Inputs used
| topics | libp2p, dht, ipfs, kad-dht |
| has_wiki | no |
| homepage | https://github.com/libp2p/specs/tree/master/kad-dht |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
61
Security posture
51Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 3/7.5 | Code-Review — Found 13/27 approved changesets -- score normalized to 4 |
| 2.5/2.5 | Contributors — project has 82 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 4.5/7.5 | Vulnerabilities — 4 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 5.1 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 4 |
| affected_packages | 4 |
| assessed_packages | 142 |
| unassessed_packages | 0 |
| affected_by_severity | moderate 1, unknown 3 |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 142 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
58
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 93 of 93 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
64Moderate
How it's scored
| 12.6/18 | One-command bootstrap — go.mod (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 8/8 | Automated maintenance — 7 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0.07 |
Code legibility for models
98Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 53.4/55 | Manageable file sizes — 3/103 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 107,528 |
| source_files_sampled | 103 |
| oversized_source_files | 3 |
Machine-readable interfaces
40At risk
How it's scored
| 40/40 | API schema (OpenAPI/GraphQL/proto) — pb/dht.proto |
| 0/20 | MCP server |
| 0/40 | Runnable examples |
Inputs used
| example_dirs | — |
| has_mcp_signal | no |
| api_schema_files | pb/dht.proto |
Key facts
594GitHub stars
81contributors
144commits, last 12 months
3days since last push
85releases
3bus factor
49open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 259 ⇿
0Stars
259Forks
82Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 39Patch 43
Each point covers 9 days.
OpenSSF Scorecard 5.1 / 10
5.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 4 | Code-Review | Found 13/27 approved changesets -- score normalized to 4 |
| 10 | Contributors | project has 82 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 6 | Vulnerabilities | 4 existing vulnerabilities detected |
Direct dependencies 35
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/gammazero/deque | v1.2.1 | go.mod |
| Go | github.com/google/gopacket | v1.1.19 | go.mod |
| Go | github.com/google/uuid | v1.6.0 | go.mod |
| Go | github.com/guillaumemichel/reservedpool | v0.3.0 | go.mod |
| Go | github.com/hashicorp/golang-lru | v1.0.2 | go.mod |
| Go | github.com/ipfs/boxo | v0.41.0 | go.mod |
| Go | github.com/ipfs/go-cid | v0.6.2 | go.mod |
| Go | github.com/ipfs/go-datastore | v0.9.2 | go.mod |
| Go | github.com/ipfs/go-detect-race | v0.0.1 | go.mod |
| Go | github.com/ipfs/go-ds-pebble | v0.5.12 | go.mod |
| Go | github.com/ipfs/go-dsqueue | v0.2.0 | go.mod |
| Go | github.com/ipfs/go-libdht | v0.5.0 | go.mod |
| Go | github.com/ipfs/go-log/v2 | v2.9.2 | go.mod |
| Go | github.com/ipfs/go-test | v0.4.1 | go.mod |
| Go | github.com/libp2p/go-libp2p | v0.48.0 | go.mod |
| Go | github.com/libp2p/go-libp2p-kbucket | v0.9.0 | go.mod |
| Go | github.com/libp2p/go-libp2p-record | v0.3.1 | go.mod |
| Go | github.com/libp2p/go-libp2p-routing-helpers | v0.7.5 | go.mod |
| Go | github.com/libp2p/go-libp2p-testing | v0.12.0 | go.mod |
| Go | github.com/libp2p/go-libp2p-xor | v0.1.0 | go.mod |
| Go | github.com/libp2p/go-msgio | v0.3.0 | go.mod |
| Go | github.com/libp2p/go-netroute | v0.4.0 | go.mod |
| Go | github.com/multiformats/go-base32 | v0.1.0 | go.mod |
| Go | github.com/multiformats/go-multiaddr | v0.16.1 | go.mod |
| Go | github.com/multiformats/go-multibase | v0.3.0 | go.mod |
| Go | github.com/multiformats/go-multihash | v0.2.3 | go.mod |
| Go | github.com/multiformats/go-multistream | v0.6.1 | go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | go.mod |
| Go | github.com/whyrusleeping/go-keyspace | v0.0.0-20160322163242-5b898ac5add1 | go.mod |
| Go | go.opentelemetry.io/otel | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/metric | v1.44.0 | go.mod |
| Go | go.opentelemetry.io/otel/trace | v1.44.0 | go.mod |
| Go | go.uber.org/zap | v1.28.0 | go.mod |
| Go | gonum.org/v1/gonum | v0.17.0 | go.mod |
| Go | google.golang.org/protobuf | v1.36.11 | go.mod |
All dependencies 142
Full resolved dependency set from the GitHub dependency graph: 35 direct and 107 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/gammazero/deque | v1.2.1 | direct |
| Go | github.com/google/gopacket | v1.1.19 | direct |
| Go | github.com/google/uuid | v1.6.0 | direct |
| Go | github.com/guillaumemichel/reservedpool | v0.3.0 | direct |
| Go | github.com/hashicorp/golang-lru | v1.0.2 | direct |
| Go | github.com/ipfs/boxo | v0.41.0 | direct |
| Go | github.com/ipfs/go-cid | v0.6.2 | direct |
| Go | github.com/ipfs/go-datastore | v0.9.2 | direct |
| Go | github.com/ipfs/go-detect-race | v0.0.1 | direct |
| Go | github.com/ipfs/go-ds-pebble | v0.5.12 | direct |
| Go | github.com/ipfs/go-dsqueue | v0.2.0 | direct |
| Go | github.com/ipfs/go-libdht | v0.5.0 | direct |
| Go | github.com/ipfs/go-log/v2 | v2.9.2 | direct |
| Go | github.com/ipfs/go-test | v0.4.1 | direct |
| Go | github.com/libp2p/go-libp2p | v0.48.0 | direct |
| Go | github.com/libp2p/go-libp2p-kbucket | v0.9.0 | direct |
| Go | github.com/libp2p/go-libp2p-record | v0.3.1 | direct |
| Go | github.com/libp2p/go-libp2p-routing-helpers | v0.7.5 | direct |
| Go | github.com/libp2p/go-libp2p-testing | v0.12.0 | direct |
| Go | github.com/libp2p/go-libp2p-xor | v0.1.0 | direct |
| Go | github.com/libp2p/go-msgio | v0.3.0 | direct |
| Go | github.com/libp2p/go-netroute | v0.4.0 | direct |
| Go | github.com/multiformats/go-base32 | v0.1.0 | direct |
| Go | github.com/multiformats/go-multiaddr | v0.16.1 | direct |
| Go | github.com/multiformats/go-multibase | v0.3.0 | direct |
| Go | github.com/multiformats/go-multihash | v0.2.3 | direct |
| Go | github.com/multiformats/go-multistream | v0.6.1 | direct |
| Go | github.com/stretchr/testify | v1.11.1 | direct |
| Go | github.com/whyrusleeping/go-keyspace | v0.0.0-20160322163242-5b898ac5add1 | direct |
| Go | go.opentelemetry.io/otel | v1.44.0 | direct |
| Go | go.opentelemetry.io/otel/metric | v1.44.0 | direct |
| Go | go.opentelemetry.io/otel/trace | v1.44.0 | direct |
| Go | go.uber.org/zap | v1.28.0 | direct |
| Go | gonum.org/v1/gonum | v0.17.0 | direct |
| Go | google.golang.org/protobuf | v1.36.11 | direct |
| Go | filippo.io/bigmod | v0.1.1-0.20260103110540-f8a47775ebe5 | indirect |
| Go | filippo.io/keygen | v0.0.0-20260114151900-8e2790ea4c5b | indirect |
| Go | github.com/benbjohnson/clock | v1.3.5 | indirect |
| Go | github.com/beorn7/perks | v1.0.1 | indirect |
| Go | github.com/cespare/xxhash/v2 | v2.3.0 | indirect |
| Go | github.com/cockroachdb/crlib | v0.0.0-20241112164430-1264a2edc35b | indirect |
| Go | github.com/cockroachdb/errors | v1.11.3 | indirect |
| Go | github.com/cockroachdb/logtags | v0.0.0-20230118201751-21c54148d20b | indirect |
| Go | github.com/cockroachdb/pebble/v2 | v2.1.6 | indirect |
| Go | github.com/cockroachdb/redact | v1.1.5 | indirect |
| Go | github.com/cockroachdb/swiss | v0.0.0-20251224182025-b0f6560f979b | indirect |
| Go | github.com/cockroachdb/tokenbucket | v0.0.0-20230807174530-cc333fc44b06 | indirect |
| Go | github.com/datadog/zstd | v1.5.7 | indirect |
| Go | github.com/davecgh/go-spew | v1.1.1 | indirect |
| Go | github.com/davidlazar/go-crypto | v0.0.0-20200604182044-b73af7476f6c | indirect |
| Go | github.com/decred/dcrd/dcrec/secp256k1/v4 | v4.4.1 | indirect |
| Go | github.com/dunglas/httpsfv | v1.1.0 | indirect |
| Go | github.com/filecoin-project/go-clock | v0.1.0 | indirect |
| Go | github.com/flynn/noise | v1.1.0 | indirect |
| Go | github.com/getsentry/sentry-go | v0.27.0 | indirect |
| Go | github.com/go-logr/logr | v1.4.3 | indirect |
| Go | github.com/go-logr/stdr | v1.2.2 | indirect |
| Go | github.com/gogo/protobuf | v1.3.2 | indirect |
| Go | github.com/golang/snappy | v0.0.5-0.20231225225746-43d5d4cd4e0e | indirect |
| Go | github.com/gorilla/websocket | v1.5.3 | indirect |
| Go | github.com/hashicorp/golang-lru/v2 | v2.0.7 | indirect |
| Go | github.com/huin/goupnp | v1.3.0 | indirect |
| Go | github.com/ipfs/go-block-format | v0.2.4 | indirect |
| Go | github.com/ipld/go-ipld-prime | v0.24.0 | indirect |
| Go | github.com/jackpal/go-nat-pmp | v1.0.2 | indirect |
| Go | github.com/jbenet/go-temp-err-catcher | v0.1.0 | indirect |
| Go | github.com/jorropo/jsync | v1.0.1 | indirect |
| Go | github.com/klauspost/compress | v1.18.0 | indirect |
| Go | github.com/klauspost/cpuid/v2 | v2.3.0 | indirect |
| Go | github.com/koron/go-ssdp | v0.0.6 | indirect |
| Go | github.com/kr/pretty | v0.3.1 | indirect |
| Go | github.com/kr/text | v0.2.0 | indirect |
| Go | github.com/libp2p/go-buffer-pool | v0.1.0 | indirect |
| Go | github.com/libp2p/go-cidranger | v1.1.0 | indirect |
| Go | github.com/libp2p/go-flow-metrics | v0.3.0 | indirect |
| Go | github.com/libp2p/go-libp2p-asn-util | v0.4.1 | indirect |
| Go | github.com/libp2p/go-reuseport | v0.4.0 | indirect |
| Go | github.com/libp2p/go-yamux/v5 | v5.0.1 | indirect |
| Go | github.com/marten-seemann/tcp | v0.0.0-20210406111302-dfbc87cc63fd | indirect |
| Go | github.com/mattn/go-isatty | v0.0.22 | indirect |
| Go | github.com/mikioh/tcpinfo | v0.0.0-20190314235526-30a79bb1804b | indirect |
| Go | github.com/mikioh/tcpopt | v0.0.0-20190314235656-172688c1accc | indirect |
| Go | github.com/minio/minlz | v1.0.1-0.20250507153514-87eb42fe8882 | indirect |
| Go | github.com/minio/sha256-simd | v1.0.1 | indirect |
| Go | github.com/mr-tron/base58 | v1.3.0 | indirect |
| Go | github.com/multiformats/go-base36 | v0.2.0 | indirect |
| Go | github.com/multiformats/go-multiaddr-dns | v0.5.0 | indirect |
| Go | github.com/multiformats/go-multiaddr-fmt | v0.1.0 | indirect |
| Go | github.com/multiformats/go-multicodec | v0.10.0 | indirect |
| Go | github.com/multiformats/go-varint | v0.1.0 | indirect |
| Go | github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | indirect |
| Go | github.com/pbnjay/memory | v0.0.0-20210728143218-7b4eea64cf58 | indirect |
| Go | github.com/pion/datachannel | v1.5.10 | indirect |
| Go | github.com/pion/dtls/v3 | v3.1.2 | indirect |
| Go | github.com/pion/ice/v4 | v4.0.10 | indirect |
| Go | github.com/pion/interceptor | v0.1.40 | indirect |
| Go | github.com/pion/logging | v0.2.4 | indirect |
| Go | github.com/pion/mdns/v2 | v2.0.7 | indirect |
| Go | github.com/pion/randutil | v0.1.0 | indirect |
| Go | github.com/pion/rtcp | v1.2.16 | indirect |
| Go | github.com/pion/rtp | v1.8.19 | indirect |
| Go | github.com/pion/sctp | v1.8.39 | indirect |
| Go | github.com/pion/sdp/v3 | v3.0.18 | indirect |
| Go | github.com/pion/srtp/v3 | v3.0.6 | indirect |
| Go | github.com/pion/stun/v3 | v3.1.1 | indirect |
| Go | github.com/pion/transport/v3 | v3.0.7 | indirect |
| Go | github.com/pion/transport/v4 | v4.0.1 | indirect |
| Go | github.com/pion/turn/v4 | v4.0.2 | indirect |
| Go | github.com/pion/webrtc/v4 | v4.1.2 | indirect |
| Go | github.com/pkg/errors | v0.9.1 | indirect |
| Go | github.com/pmezard/go-difflib | v1.0.0 | indirect |
| Go | github.com/polydawn/refmt | v0.90.0 | indirect |
| Go | github.com/prometheus/client_golang | v1.23.2 | indirect |
| Go | github.com/prometheus/client_model | v0.6.2 | indirect |
| Go | github.com/prometheus/common | v0.67.5 | indirect |
| Go | github.com/prometheus/procfs | v0.20.1 | indirect |
| Go | github.com/quic-go/qpack | v0.6.0 | indirect |
| Go | github.com/quic-go/quic-go | v0.59.1 | indirect |
| Go | github.com/quic-go/webtransport-go | v0.10.0 | indirect |
| Go | github.com/raduberinde/axisds | v0.1.0 | indirect |
| Go | github.com/raduberinde/btreemap | v0.0.0-20250419174037-3d62b7205d54 | indirect |
| Go | github.com/rogpeppe/go-internal | v1.14.1 | indirect |
| Go | github.com/spaolacci/murmur3 | v1.1.0 | indirect |
| Go | github.com/wlynxg/anet | v0.0.5 | indirect |
| Go | go.opentelemetry.io/auto/sdk | v1.2.1 | indirect |
| Go | go.uber.org/dig | v1.19.0 | indirect |
| Go | go.uber.org/fx | v1.24.0 | indirect |
| Go | go.uber.org/mock | v0.5.2 | indirect |
| Go | go.uber.org/multierr | v1.11.0 | indirect |
| Go | go.yaml.in/yaml/v2 | v2.4.4 | indirect |
| Go | golang.org/x/crypto | v0.53.0 | indirect |
| Go | golang.org/x/exp | v0.0.0-20260603202125-055de637280b | indirect |
| Go | golang.org/x/mod | v0.36.0 | indirect |
| Go | golang.org/x/net | v0.55.0 | indirect |
| Go | golang.org/x/sync | v0.21.0 | indirect |
| Go | golang.org/x/sys | v0.46.0 | indirect |
| Go | golang.org/x/telemetry | v0.0.0-20260508192327-42602be52be6 | indirect |
| Go | golang.org/x/text | v0.38.0 | indirect |
| Go | golang.org/x/time | v0.12.0 | indirect |
| Go | golang.org/x/tools | v0.45.0 | indirect |
| Go | gopkg.in/yaml.v3 | v3.0.1 | indirect |
| Go | lukechampine.com/blake3 | v1.4.1 | indirect |
Dependency advisories 4
This repository publishes no package the index resolves, so its own dependency graph was assessed — 142 packages, which also include development and test pins that never ship: 4 carry known advisories, of which 0 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| github.com/quic-go/webtransport-go | v0.10.0 | indirect | moderate | 1 | 0.11.1 |
| golang.org/x/crypto | v0.53.0 | indirect | unknown | 1 | — |
| golang.org/x/net | v0.55.0 | indirect | unknown | 1 | 0.56.0 |
| golang.org/x/text | v0.38.0 | indirect | unknown | 1 | 0.39.0 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"libp2p",
"dht",
"ipfs",
"kad-dht"
],
"is_fork": false,
"size_kb": 5056,
"has_wiki": false,
"homepage": "https://github.com/libp2p/specs/tree/master/kad-dht",
"languages": {
"Go": 1168341
},
"pushed_at": "2026-07-23T02:57:27Z",
"created_at": "2016-08-21T18:40:35Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T20:21:36Z",
"description": "A Kademlia DHT implementation on go-libp2p",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://libp2p.io",
"name": "libp2p",
"type": "Organization",
"login": "libp2p",
"company": null,
"location": "Earth",
"followers": 1328,
"avatar_url": "https://avatars.githubusercontent.com/u/14838238?v=4",
"created_at": "2015-09-25T14:12:04Z",
"is_verified": null,
"public_repos": 275,
"account_age_days": 3956
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.42.1",
"kind": "patch",
"published_at": "2026-07-20T20:20:11Z"
},
{
"tag": "v0.42.0",
"kind": "minor",
"published_at": "2026-07-20T07:17:21Z"
},
{
"tag": "v0.41.0",
"kind": "minor",
"published_at": "2026-07-01T08:24:51Z"
},
{
"tag": "v0.40.0",
"kind": "minor",
"published_at": "2026-05-20T08:34:24Z"
},
{
"tag": "v0.39.2",
"kind": "patch",
"published_at": "2026-05-07T11:43:07Z"
},
{
"tag": "v0.39.1",
"kind": "patch",
"published_at": "2026-04-20T15:59:56Z"
},
{
"tag": "v0.39.0",
"kind": "minor",
"published_at": "2026-03-19T10:28:11Z"
},
{
"tag": "v0.38.0",
"kind": "minor",
"published_at": "2026-02-16T08:49:16Z"
},
{
"tag": "v0.37.1",
"kind": "patch",
"published_at": "2026-01-27T20:58:07Z"
},
{
"tag": "v0.37.0",
"kind": "minor",
"published_at": "2026-01-14T08:51:32Z"
},
{
"tag": "v0.36.0",
"kind": "minor",
"published_at": "2025-11-26T18:36:47Z"
},
{
"tag": "v0.35.1",
"kind": "patch",
"published_at": "2025-10-03T14:38:25Z"
},
{
"tag": "v0.35.0",
"kind": "minor",
"published_at": "2025-10-01T10:03:27Z"
},
{
"tag": "v0.34.0",
"kind": "minor",
"published_at": "2025-08-12T15:33:16Z"
},
{
"tag": "v0.33.1",
"kind": "patch",
"published_at": "2025-05-21T08:26:15Z"
},
{
"tag": "v0.33.0",
"kind": "minor",
"published_at": "2025-05-09T11:24:29Z"
},
{
"tag": "v0.32.0",
"kind": "minor",
"published_at": "2025-04-29T15:34:35Z"
},
{
"tag": "v0.31.0",
"kind": "minor",
"published_at": "2025-04-02T11:25:21Z"
},
{
"tag": "v0.30.2",
"kind": "patch",
"published_at": "2025-03-05T00:18:41Z"
},
{
"tag": "v0.30.1",
"kind": "patch",
"published_at": "2025-03-04T17:48:39Z"
},
{
"tag": "v0.30.0",
"kind": "minor",
"published_at": "2025-03-04T10:13:02Z"
},
{
"tag": "v0.29.2",
"kind": "patch",
"published_at": "2025-02-26T19:19:53Z"
},
{
"tag": "v0.29.1",
"kind": "patch",
"published_at": "2025-02-21T14:37:03Z"
},
{
"tag": "v0.29.0",
"kind": "minor",
"published_at": "2025-01-29T15:38:55Z"
},
{
"tag": "v0.28.2",
"kind": "patch",
"published_at": "2025-01-09T22:16:47Z"
},
{
"tag": "v0.28.1",
"kind": "patch",
"published_at": "2024-11-15T14:04:37Z"
},
{
"tag": "v0.28.0",
"kind": "minor",
"published_at": "2024-11-13T22:32:24Z"
},
{
"tag": "v0.27.0",
"kind": "minor",
"published_at": "2024-10-04T13:24:29Z"
},
{
"tag": "v0.26.1",
"kind": "patch",
"published_at": "2024-08-21T19:22:24Z"
},
{
"tag": "v0.26.0",
"kind": "minor",
"published_at": "2024-08-21T06:20:07Z"
},
{
"tag": "v0.25.2",
"kind": "patch",
"published_at": "2023-11-28T09:45:56Z"
},
{
"tag": "v0.25.1",
"kind": "patch",
"published_at": "2023-09-04T14:31:19Z"
},
{
"tag": "v0.25.0",
"kind": "minor",
"published_at": "2023-08-18T11:13:12Z"
},
{
"tag": "v0.24.3",
"kind": "patch",
"published_at": "2023-07-28T09:43:38Z"
},
{
"tag": "v0.24.2",
"kind": "patch",
"published_at": "2023-06-20T02:35:35Z"
},
{
"tag": "v0.24.1",
"kind": "patch",
"published_at": "2023-06-15T12:57:08Z"
},
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2023-06-12T12:58:13Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2023-04-06T18:10:20Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2023-03-27T22:44:09Z"
},
{
"tag": "v0.21.1",
"kind": "patch",
"published_at": "2023-02-22T15:33:33Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2023-02-10T03:50:45Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2022-12-11T21:18:05Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2022-12-11T19:25:22Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2022-08-30T19:33:22Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2022-08-15T15:43:27Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2022-06-02T14:37:55Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2021-11-11T18:12:21Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2021-10-26T18:43:51Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2021-08-18T18:22:13Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2021-07-28T06:06:21Z"
},
{
"tag": "v0.12.2",
"kind": "patch",
"published_at": "2021-06-18T16:11:50Z"
},
{
"tag": "v0.12.1",
"kind": "patch",
"published_at": "2021-05-27T17:39:17Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2021-05-14T07:51:56Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2020-12-09T01:02:18Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2020-12-09T01:00:10Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2020-09-02T20:56:01Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2020-08-26T01:11:01Z"
},
{
"tag": "v0.8.3",
"kind": "patch",
"published_at": "2020-07-30T11:31:11Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2020-05-27T22:03:41Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2020-05-25T05:45:58Z"
},
{
"tag": "v0.7.12",
"kind": "patch",
"published_at": "2020-05-21T02:33:23Z"
},
{
"tag": "v0.7.11",
"kind": "patch",
"published_at": "2020-04-29T20:42:15Z"
},
{
"tag": "v0.7.10",
"kind": "patch",
"published_at": "2020-04-26T18:29:47Z"
},
{
"tag": "v0.7.6",
"kind": "patch",
"published_at": "2020-04-21T17:40:13Z"
},
{
"tag": "v0.7.5",
"kind": "patch",
"published_at": "2020-04-21T02:42:35Z"
},
{
"tag": "v0.7.2",
"kind": "patch",
"published_at": "2020-04-10T03:42:36Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2020-04-10T01:49:37Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2020-04-09T20:16:18Z"
},
{
"tag": "v0.6.2",
"kind": "patch",
"published_at": "2020-04-07T00:15:34Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2020-04-06T05:39:44Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2020-03-13T23:42:34Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2020-03-05T18:04:05Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2020-01-07T17:42:03Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2019-12-14T17:47:25Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2019-12-11T18:47:16Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2019-12-11T10:54:56Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2019-12-02T18:16:26Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2019-11-06T09:46:19Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2019-11-05T11:10:07Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2019-09-07T17:40:38Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2019-08-02T23:55:22Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2019-05-26T22:33:36Z"
},
{
"tag": "v0.0.14",
"kind": "patch",
"published_at": "2019-05-24T15:14:15Z"
},
{
"tag": "v0.0.11",
"kind": "patch",
"published_at": "2019-05-17T18:34:42Z"
},
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2019-02-27T05:10:01Z"
}
],
"recent_commits": [
{
"oid": "7b897dcea115a0bcf707ce04b526206bc550576f",
"body": null,
"is_bot": false,
"headline": "chore: release v0.42.1 (#1286)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-20T20:19:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dd16b153085c5e5ff060de19b595dddd0a3cb01",
"body": null,
"is_bot": false,
"headline": "fix: validate local records in SearchValue (#1285)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-20T19:32:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b419cd9e09a213301395a4492d31e210e229581f",
"body": null,
"is_bot": false,
"headline": "chore: release v0.42.0 (#1284)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-20T07:17:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "727bea06ca8fa23b060dfa319bc78b77d4975df8",
"body": "* refactor: consolidate value-record persistence into records.ValueStore\n\n* refactor!: namespace value record keys, add datastore options\n\n* feat: garbage-collect expired value records\n\n* refactor: serve provider records without the manager event loop\n\n* refactor: gate value/provider RPCs on store p\n[…]\nssertion, and off-goroutine require\n\n* refactor: remove lifecycle context from constructors\n\n* refactor(records): address @gammazero feedback\n\n---------\n\nCo-authored-by: Marcin Rataj <lidel@lidel.org>",
"is_bot": false,
"headline": "refactor: remove lifecycle context from constructors (#1282)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-18T08:11:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5e0ce5abb0b63c4c47426bfae910fcf73e2a265",
"body": "* refactor: consolidate value-record persistence into records.ValueStore\n\n* refactor!: namespace value record keys, add datastore options\n\n* feat: garbage-collect expired value records\n\n* refactor: serve provider records without the manager event loop\n\n* refactor: gate value/provider RPCs on store p\n[…]\nbased expiry\n\n* test: fix a GC race, a vacuous shuffle assertion, and off-goroutine require\n\n* refactor(records): address @gammazero feedback\n\n---------\n\nCo-authored-by: Marcin Rataj <lidel@lidel.org>",
"is_bot": false,
"headline": "refactor(records): consolidate records persistence (#1277)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-18T07:37:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cb9639642a8d54f22a49e7b45b66fd7615f2bbf5",
"body": null,
"is_bot": false,
"headline": "update dependencies (#1283)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-07-17T08:59:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5766699832217ec5de19f8a2a01c02893f5a4f6c",
"body": "* refactor(pb): bound the serialized size of a peer record\n\n* docs: document peer record size limit\n\n* fix(pb): size the peer record connection field exactly\n\n* test: use math/rand/v2 in record_size_test\n\n* fix(dht): scrub peer records from echoed PING and PUT_VALUE responses\n\n* test(pb): cover cap boundaries and post-bound Connection sizing",
"is_bot": false,
"headline": " refactor(pb): bound the serialized size of a peer record (#1281)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-16T11:03:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "161a21b5799c5609ee118382cc1c4cc9d4323050",
"body": null,
"is_bot": false,
"headline": "chore: migrate from math/rand to math/rand/v2 (#1280)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-15T11:02:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bfc00189874f5b4ae0c84d87d5f52b78c6d915c",
"body": null,
"is_bot": false,
"headline": "chore: bump go-libp2p-kbucket (#1279)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-15T09:47:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5786e0412b483340056c19e0bf29302acb648840",
"body": "…achine (#1278)",
"is_bot": false,
"headline": "test: give TestProvidesMany's lookups a deadline that fits a loaded m…",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-15T08:39:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07d03490f567b798e37febf3f167e991605eac91",
"body": "* upgrade go-test to v0.4.0\n\n- Upgrade to go-test v0.4.0 that uses math/rand/v2 and has reusable generator\n- Reuse random number source for generating data in the same goroutine\n- Only use go-test from test code.\n\n* fix dup import\n\n* use tagged version of go-test\n\n---------\n\nCo-authored-by: Guillaume Michel <guillaumemichel@users.noreply.github.com>",
"is_bot": false,
"headline": "upgrade go-test to v0.4.0 (#1275)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-07-15T07:18:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1000db3722b173b7236b17516ffc6f94e67c8c8a",
"body": "…276)",
"is_bot": false,
"headline": "test: fix flaky TestOptimisticProvide timeout and peerIDs seeding (#1…",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-14T08:03:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9eb1c44537b052256c7b2901a126868277dcd01",
"body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.51.0...v0.52.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n dependency-version: 0.52.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#1274)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-11T06:26:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "115ef033cc76f4f3b51a7570d4300c365f51989e",
"body": "* update dependencies\n* update code to use `WaitGroup.Go`",
"is_bot": false,
"headline": "Update dependencies (#1273)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-07-07T01:36:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2486b7091cda318a4a64a1da366e86cd88b27f6",
"body": "Bumps [golang.org/x/net](https://github.com/golang/net) from 0.53.0 to 0.55.0.\n- [Commits](https://github.com/golang/net/compare/v0.53.0...v0.55.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-version: 0.55.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (#1272)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-03T19:01:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24207e3f7889d5746a76aada23394f77ac732f8c",
"body": "Expired and undecodable provider records are deleted while loading a\nprovider set. The delete-error check is inverted: it logs a failure only\nwhen the record was already gone, and stays silent on genuine datastore\nerrors. Log only when the error is not ErrNotFound, matching the check\non the run-loop GC path.",
"is_bot": false,
"headline": "fix: correct delete-error check in provider gc (#1271)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-07-03T04:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "254eff00cd7037ac942c24689f16f309bba66320",
"body": "Honest peers return at most bucketSize closer peers, but a queried peer\ncan reply with an arbitrarily long list. Each entry costs a peerstore\nwrite and a linear insertion into the query peerset, so one oversized\nresponse drives O(n^2) work on the lookup goroutine and can stall the\nquery. Truncate accepted closer peers to twice bucketSize, which never\ntrims a well-formed response.",
"is_bot": false,
"headline": "fix: cap closer peers accepted per response (#1270)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-07-03T04:51:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c89e0cd311267fcf035fd3411c3dfa63968d3ce",
"body": null,
"is_bot": false,
"headline": "chore: release v0.41.0 (#1269)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-01T08:24:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95c984d7c104a28d8c692dc62598c54fa2fcf950",
"body": "…x (#1265)\n\n* test: reproduce reported bug in test\n\n* fix(provider): cover full keyspace when peers cluster under one prefix\n\n* test: reproduce key drop when rf below bucket size\n\n* fix: exploreSwarm in sibling branch with rf<bucket\n\n* fix: broaden covered prefix by peer count, not common ancestor",
"is_bot": false,
"headline": "fix(provider): cover full keyspace when peers cluster under one prefi…",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-07-01T08:00:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "466223998256b0ebf749262e96c18e0d838f8afc",
"body": "* fix(provider): reprovide all regions when resume is disabled\n\n* fix(provider): keep reprovide history GC running (#1268)\n\n* fix(provider): keep reprovide history GC running\n\nA fresh start with resume disabled clears the reprovide history so every\nregion is reprovided once the node comes online. Ro\n[…]\n\n\nThe fixture also checks the error from keystore.Put, which both tests\ndropped; Put returns the stored keys and an error, not just an error.\n\n---------\n\nCo-authored-by: Marcin Rataj <lidel@lidel.org>",
"is_bot": false,
"headline": "fix(provider): reprovide all regions when resume is disabled (#1267)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-06-25T05:21:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "146f2cfad78613caa9a924cf6057ec7f6b67def3",
"body": "* fix: cut reprovide peak memory with key count\n\n## Problem\n\nbatchReprovide loaded every multihash in a region with keystore.Get\njust to learn the key count and make routing decisions, then loaded the\n(often wider) covered region a second time after swarm exploration,\nholding the first slice across \n[…]\nre count test in both shared and factory\n datastore modes\n\n---------\n\nCo-authored-by: guillaumemichel <guillaume@michel.id>\nCo-authored-by: Guillaume Michel <guillaumemichel@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: cut reprovide peak memory with key count (#1259)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-06-16T20:34:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "75bc4749570bb28f44ba02434f0a27ca03cca50d",
"body": null,
"is_bot": false,
"headline": "tests: fix flaky TestBootStrapWhenRTIsEmpty (#1264)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-06-16T07:47:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c24a88f009ae34fac611ea214ed92fd17eeee43",
"body": "Shared-datastore mode filed its two reset slots under the datastore\nprefixes \"/0\" and \"/1\". Those tokens match the single-bit path\ncomponents the keystore writes for every key, and go-datastore's\nPrefixTransform adds a prefix on write only when the key lacks it while\nalways stripping one on read. A \n[…]\n keeps each slot in\na separate datastore and never wraps. The keystore is a rebuildable\nindex, so pre-existing \"/0\" and \"/1\" data is ignored and re-advertised\non the next reprovide cycle.\n\nFixes #1260",
"is_bot": false,
"headline": "fix(keystore): non-colliding reset slot prefixes (#1262)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-06-15T18:41:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "73bd7fd5d62e78c8281347d946a9cd2ca22b8359",
"body": "…1258)\n\nBumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.59.0 to 0.59.1.\n- [Release notes](https://github.com/quic-go/quic-go/releases)\n- [Commits](https://github.com/quic-go/quic-go/compare/v0.59.0...v0.59.1)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/quic\n[…]\ngo\n dependency-version: 0.59.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 (#…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-05T06:13:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d40b14b5b2cc713f78173f411b8eec4c1827552f",
"body": null,
"is_bot": false,
"headline": "chore: release v0.40.0 (#1257)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-05-20T08:34:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b0dd02f89c586fb5ab4b30d15916ff64b4ec5b8",
"body": "…nsive (#1256)\n\n* feat(ResettableKeystore): keep worker responsive during resets\n\n* test(ResettableKeystore): guard emptySharedAltDs\n\nthis test is a tripwire: if someone replaces emptySharedAltDs with\nthe obvious wrapped iterate-then-Delete path, the prefix-collision\nbug returns silently and this te\n[…]\n harmless: opCleanup's final drain picks the keys up on\nsuccess, and clears s.buf on failure.\n\n* fix: Sync once after all batches are written\n\n---------\n\nCo-authored-by: Marcin Rataj <lidel@lidel.org>",
"is_bot": false,
"headline": "fix(ResettableKeystore): speed up reset process and keep worker respo…",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-05-20T08:20:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d5ed07698ff742d2f57ecd4d0c10d0fd6b8af96c",
"body": "* fix(provider): hold cycleStatsLk in batchReprovide defer\n\n* test(provider): regression test for #1254\n\n---------\n\nCo-authored-by: Marcin Rataj <lidel@lidel.org>",
"is_bot": false,
"headline": "fix(provider): hold cycleStatsLk in batchReprovide defer (#1255)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-05-19T12:51:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b73e1e814f5f82e3554d350e61e33cae551084f6",
"body": null,
"is_bot": false,
"headline": "fix(provider): per-peer timeout on ADD_PROVIDER sends (#1252)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-05-13T14:03:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63a3e3ce395b7cd683e413e72a418ebddf97681e",
"body": "* fix(provider): bound keystore.Size in Stats with a timeout\n\n* docs(provider): tighten Stats godoc\n\n---------\n\nCo-authored-by: Marcin Rataj <lidel@lidel.org>",
"is_bot": false,
"headline": "fix(provider)!: bound keystore.Size in Stats with a timeout (#1251)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-05-13T13:45:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "356266128e5a2c9aefd0643813771758f8f550f9",
"body": null,
"is_bot": false,
"headline": "update dependencies (#1250)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-05-13T00:34:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7289515f6bd05a29afc4cf6e43038fd521e1a4a",
"body": null,
"is_bot": false,
"headline": "chore: release v0.39.2 (#1249)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-05-07T11:42:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e3944b70dbd818432ed9b4556d715ec4603be4c",
"body": null,
"is_bot": false,
"headline": "chore: bump boxo to v0.39.0 (#1248)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-05-07T11:32:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32a3e31b49b2f83a76f0b7a619b67cdc79500495",
"body": null,
"is_bot": false,
"headline": "test: fix flaky TestStartProvidingSingle (#1247)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-05-07T04:47:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b00ec536b9180cb706ed7851e90453317f8e6b18",
"body": "…1246)\n\n* feat(provider): allow WithReprovideInterval(0) for burst-only mode\n\nWithReprovideInterval(0) now configures the SweepingProvider to run\nwithout a periodic reprovide schedule. ProvideOnce and StartProviding\ncontinue to publish provider records to the dht via the burst worker\npool, but no sc\n[…]\nys empty.\n\n* refactor: simplify StartProvide()\n\n* refactor: minimize change diff\n\n* fix: don't remove from keystore on StopProviding()\n\n---------\n\nCo-authored-by: guillaumemichel <guillaume@michel.id>",
"is_bot": false,
"headline": "feat(provider): allow WithReprovideInterval(0) for burst-only mode (#…",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-05-06T13:25:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bef178c52ff2c5b024a0a2a29e340f87f0f0cf42",
"body": null,
"is_bot": false,
"headline": "chore: release v0.39.1 (#1245)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-04-20T15:59:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "248f53b7356561c025aa8e7b9446d2810cc55c51",
"body": "* test: FindProvidersAsync AddrInfo.Addrs race\n\nfindProvidersAsyncRoutine hands the same []*peer.AddrInfo to two\nplaces: routing.QueryEvent.Responses (read by any consumer of\nRegisterForQueryEvents, e.g. kubo's findprovs HTTP handler marshaling\nevents) and the return value, which queryPeer then muta\n[…]\nrker.\n\nRefs: ipfs/kubo#11287, ipfs/kubo#11116.\n\n* docs: document queryFn aliasing contract\n\n* test: skip race stress test under -short\n\n---------\n\nCo-authored-by: guillaumemichel <guillaume@michel.id>",
"is_bot": false,
"headline": "fix: data race on AddrInfo.Addrs in queryPeer (#1244)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-04-20T10:03:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e8f6083c28e28c78989a9d21534e0f486e3cc6be",
"body": "* fix(provider): reduce provide log verbosity\n\nThe per-batch \"sent provider records to peers\" message is too noisy\nat INFO level. Move it to DEBUG.\n\n* fix(provider): add INFO logs for provide/reprovide lifecycle\n\nLog start/end of batchProvide and batchReprovide at INFO so\noperators can track per-prefix progress without enabling DEBUG.\nRegion-level detail stays at DEBUG.",
"is_bot": false,
"headline": "fix(provider): reduce provide log verbosity (#1243)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-04-13T04:48:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9a090e67f64197e535819ac4183cc1889375d50",
"body": null,
"is_bot": false,
"headline": "tests: fix flaky TestStartProvidingSingle (#1242)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-03-31T09:32:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bbc7468538879c28fb083a43186470040a500d9",
"body": null,
"is_bot": false,
"headline": "chore: release v0.39.0 (#1240)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-03-19T10:27:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8db4c7f4014a4ec7787bf3e76486e2d8e554847c",
"body": null,
"is_bot": false,
"headline": "chore: bump deps (#1239)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-03-19T10:02:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ba6b28e4b298923808de88425256b221eca3858",
"body": "* feat(provider/keystore): alt datastore wipe\n\n* docs(keystore): clarify WithDatastore namespace responsibility\n\ncallers that need a prefix should wrap the datastore with\nnamespace.Wrap before passing it to WithDatastore.\n\n* close owned datastores on close\n\n* keep supplied datastore for meta (active\n[…]\nry mode)\n- log new datastore creation during reset\n- log namespace swap with new active index and size\n- log old datastore removal after swap\n\n---------\n\nCo-authored-by: Marcin Rataj <lidel@lidel.org>",
"is_bot": false,
"headline": "feat(provider/keystore): alt datastore wipe (#1233)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-03-19T09:50:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15f0b42671b2490c790a6a0c1e49e745b2d175be",
"body": "* Expose provider record TTL as options\n\nSigned-off-by: Philip Laine <philip.laine@gmail.com>\n\n* tests: refactored TestProvidesCacheExpire to use testing/synctest\n\n---------\n\nSigned-off-by: Philip Laine <philip.laine@gmail.com>\nCo-authored-by: guillaumemichel <guillaume@michel.id>",
"is_bot": false,
"headline": "Expose provider record TTL as options (#1237)",
"author_name": "Philip Laine",
"author_login": "phillebaba",
"committed_at": "2026-03-04T08:41:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d9f9f6a144fbf4d9516d068781ee5c54fdc4dd3",
"body": null,
"is_bot": false,
"headline": "Release v0.38.0 (#1236)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-02-16T08:49:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cbddc63e9482d53917cc0bedbb170a4f1fa9df6",
"body": null,
"is_bot": false,
"headline": "update go-datastore to v0.9.1 (#1235)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-02-16T07:48:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c013eaca1750f142043adee6780dabf19a63011f",
"body": "Bumps [github.com/pion/dtls/v3](https://github.com/pion/dtls) from 3.1.0 to 3.1.1.\n- [Release notes](https://github.com/pion/dtls/releases)\n- [Commits](https://github.com/pion/dtls/compare/v3.1.0...v3.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/pion/dtls/v3\n dependency-version: 3.1.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump github.com/pion/dtls/v3 from 3.1.0 to 3.1.1 (#1234)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-13T14:40:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9412b2838833e857d336df34755b24ab5975068",
"body": "Bumps [github.com/pion/dtls/v3](https://github.com/pion/dtls) from 3.0.6 to 3.1.0.\n- [Release notes](https://github.com/pion/dtls/releases)\n- [Commits](https://github.com/pion/dtls/compare/v3.0.6...v3.1.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/pion/dtls/v3\n dependency-version: 3.1.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump github.com/pion/dtls/v3 from 3.0.6 to 3.1.0 (#1232)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-11T16:13:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ea2e7d3e8e71ca2728c40f55e2c49ee00a2e1a3",
"body": "* fix(provider/keystore): protect keystore size during reset\n\n* remove mutex\n\n* formatting",
"is_bot": false,
"headline": "fix(provider/keystore): protect keystore size during reset (#1227)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-02-11T10:02:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdbaca7a86076536a513ef128bf0f2aa739e9a45",
"body": "* update dependencies and minimum go version\n\n* tests(provider): remove go:build go1.25\n\nNo required anymore since minimal version is supported by\ntesting/synctest\n\n---------\n\nCo-authored-by: Guillaume Michel <guillaumemichel@users.noreply.github.com>\nCo-authored-by: guillaumemichel <guillaume@michel.id>",
"is_bot": false,
"headline": "update dependencies and minimum go version (#1230)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-02-11T08:44:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3ccf46e4ce0da5b0a4e41cb348d7defa619720b",
"body": "This PR applies automated refactoring from go 1.26 (go fix ./...):\n\n- interface{} to any, slices.Contains, and other idiomatic updates.",
"is_bot": false,
"headline": "refactor: apply go fix modernizers from Go 1.26 (#1231)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-02-11T08:34:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c59fde6605a664a368010038a9100d8b56df56f0",
"body": null,
"is_bot": false,
"headline": "chore: go-libdht org transfer (#1229)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-02-10T16:11:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9e1b98519921f7daa477da3a0678348848016df",
"body": null,
"is_bot": false,
"headline": "fix(provider): close datastore results (#1226)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-01-30T15:47:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfdf80a53e6a81fbb7a985165a543dd793930851",
"body": "ensures all new issues are assigned the need/triage label and\ndisables blank issues to guide users through the template.",
"is_bot": false,
"headline": "chore: add issue templates with need/triage label",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-01-29T03:42:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b73c2d096f8e16d48969b2674b201e774432b4c4",
"body": null,
"is_bot": false,
"headline": "new version (#1225)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-01-27T20:57:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a1e2496acfc0d3e9b007493a13d2ea2d4b857bc",
"body": null,
"is_bot": false,
"headline": "replace multierr with errors.Join (#1224)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-01-27T20:48:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb7f4ce67ff88ddc227437f058bea5182f614a5f",
"body": "- Update go-libp2p to v0.47.0\n- Upgrade go-ds-pebble to v0.5.9\n - includes upgrade to pebble 2.1.4",
"is_bot": false,
"headline": "Update dependencies (#1223)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2026-01-27T19:26:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77a76e94564531977d4bb65f740674798a39543a",
"body": "when communicating with unresponsive peers, PutValue and classicProvide\ncould hang indefinitely because they used context.WithCancel or reused\nthe parent context without a per-operation timeout.\n\nthis adds a 30-second per-peer timeout to prevent a single slow peer\nfrom blocking the entire operation.\n[…]\ne timeout matches what\nupdatePeerValues already used, now extracted into a shared constant.\n\nsimilar issue was fixed in go-libp2p#3448 where stream.Close could hang\nindefinitely on unresponsive peers.",
"is_bot": false,
"headline": "fix(routing): add per-peer timeouts for PutValue and Provide (#1222)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-01-21T08:46:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23423e3911906b85db01a829f6e36e3917185cf5",
"body": null,
"is_bot": false,
"headline": "chore: release v0.37.0 (#1221)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-01-14T08:51:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "087717ccbe4b54838a42939de0214e356ccba173",
"body": "… (#1220)\n\nUntil now, keyspace exploration would fail if GetClosestPeers() would\nreturn a single peer. The peer wouldn't be accounted for, since the\nexplored keyspace coverage was nil.\nNow if GetClosestPeers() returns a single peer, exploration progresses,\nand only the peer's full key is added to covered prefix list.",
"is_bot": false,
"headline": "fix(provider): keyspace exploration should succeed with a single peer…",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-01-14T08:28:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "015f632658ceebd099d19d3ea34001c6c818d432",
"body": "…#1219)\n\nTestResettableKeystoreWithPersistence was reading schedule.Size()\nwithout holding scheduleLk, causing data race with concurrent\nbatchReprovide() that modifies the trie via PruneSubtrie().",
"is_bot": false,
"headline": "fix(provider): hold scheduleLk when reading schedule.Size() in test (…",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-01-13T09:40:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fee38f31b81aa8e64c387b9436c9ccc53b01e28",
"body": "workerPool.Close() was called after wg.Wait() in cleanupFuncs. this\ncaused deadlock when goroutines were blocked on workerPool.Acquire()\nduring shutdown - they would never be woken because Close() hadn't\nbeen called yet.",
"is_bot": false,
"headline": "fix(provider): close worker pool before wg.Wait() (#1218)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2026-01-13T09:38:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8e7cf5b8dae56a9da65e2fe328d21ee3c5c8f0b",
"body": null,
"is_bot": false,
"headline": "chore: remove deprecated providers pkg (#1211)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-01-13T08:53:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ad6ca5eeecff43283a334120a12f8c0add79f1b",
"body": "…ration (#1216)",
"is_bot": false,
"headline": "fix(provider): don't discard peers if they all share CPL during explo…",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-01-09T22:29:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb64bfa6e2bb01b7044a87578446d5cf2adcf34f",
"body": "See https://github.com/ipfs/kubo/issues/11116 for context of this fix",
"is_bot": false,
"headline": "fix(records): clone addresses received from peerstore (#1210)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-01-09T22:21:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d7c64c54b6f6b819ffb3aaaf8f6b456b057b8c4",
"body": null,
"is_bot": false,
"headline": "tests: fix flaky TestOptimisticProvide (#1213)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-01-07T14:58:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19925f546e7338edaa2033671fa2abb9b507403a",
"body": null,
"is_bot": false,
"headline": "tests: fix flaky TestHandleRemotePeerProtocolChanges (#1212)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-01-07T14:03:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "666af0e4abf7ae39901a73b512362f9694491082",
"body": null,
"is_bot": false,
"headline": "chore: bump go-libp2p to v0.46 (#1209)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2026-01-06T15:12:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f46f48ac1326452155dcd800d0b7716ffabec954",
"body": null,
"is_bot": false,
"headline": "new version (#1204)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2025-11-26T18:36:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "958a3498852569e6aa293c1cfaf4048d3f38355b",
"body": "* update dependencies\n* mockConn interface As",
"is_bot": false,
"headline": "update dependencies (#1205)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2025-11-26T05:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf7432909ee5684479f4c0e1b317e345a2ed702c",
"body": "Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.42.0 to 0.45.0.\n- [Commits](https://github.com/golang/crypto/compare/v0.42.0...v0.45.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/crypto\n dependency-version: 0.45.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.45.0 (#1203)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-11-20T09:44:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d2d861e0abb0a6b373441c0b85e273054a22fe1",
"body": "* fix(provider): protect `SweepingProvider.wg`\n* fix(provider): conflict resolution (#1199)\n* fix(ResettableKeystore): race when closing during reset (#1201)",
"is_bot": false,
"headline": "fix(provider): protect `SweepingProvider.wg` (#1200)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-11-12T01:31:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7eb605c4b2469a0297c4e9180df0d2b081a88ff5",
"body": null,
"is_bot": false,
"headline": "fix(ResettableKeystore): race when closing during reset (#1201)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-11-08T07:21:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58b46ba666b3cddeb449fe2a3f2d7b9a5454aa31",
"body": null,
"is_bot": false,
"headline": "fix(provider): conflict resolution (#1199)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-11-07T22:21:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47e51c0ba385c5dc1c042168559f45a81a17651c",
"body": null,
"is_bot": false,
"headline": "fix(provider): remove from trie by pruning prefix (#1198)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-11-07T20:11:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fa0f96d4ec8796d4bea0bb191580ece143d4500",
"body": "Rename \"total_provide_count\" to \"provider.provides\" to follow:\n- OpenTelemetry's dot notation convention for hierarchical metrics\n- Pattern used by all other kad-dht metrics (rpc.inbound.*, rpc.outbound.*, network.size)\n- Prometheus naming best practices (no redundant \"total\" in metric name)\n\nBefore\n[…]\nide_count → exports as total_provide_count_total (redundant)\nAfter: provider.provides → exports as provider_provides_total (clean)\n\nThis is a breaking change for anyone monitoring the old metric name.",
"is_bot": false,
"headline": "fix(provider): rename metric to follow OpenTelemetry conventions (#1195)",
"author_name": "Marcin Rataj",
"author_login": "lidel",
"committed_at": "2025-11-07T17:50:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1acbd9bd3fcb9b374ceb3858b58cb4fd54ef49fc",
"body": "* refactor(keystore): keep track of size\n\n* pkg godoc\n\n* Keystore default path\n\nUpdate to \"keystore\" only, since it should be a namespace of the\n\"provider\" datastore defined in provider.go.\n\n* persist size on keystore.Close()\n\n* deduplicate put to altDs\n\n* tests\n\n* adding logger to Keystore\n\n* don't\n[…]\ned to reprovide queue\n\n* ResettableKeystore tests\n\n* fix: datastore crash when emptying datastore after close\n\n* tests\n\n* prevent writing to datastore after close\n\n* cancel network operations on close",
"is_bot": false,
"headline": "fix(provider): resume cycle from persisted keystore (#1193)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-11-07T17:47:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "edead48407a12ddc502a9a40400fc5634a22853d",
"body": null,
"is_bot": false,
"headline": "feat(provider): connectivity callbacks (#1194)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-11-07T15:25:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f88e998dce9517a10ed5a3288b2ee7afbe5b3fe2",
"body": "* trie iterators\n\n* rename to EntriesIter, KeysIter, ValuesIter\n\n* AllEntries depends on EntriesIter\n\n* reorder functions\n\n* provideRegion uses iterator\n\n* refactor cycle_stats\n\n* AllKeys\n\n* fix: CycleStats\n\n* keyspace uses iterator\n\n* replace AllEntries where possible\n\n* prune keys and peers trie to free up memory during network operations\n\n---------\n\nCo-authored-by: Andrew Gillis <11790789+gammazero@users.noreply.github.com>",
"is_bot": false,
"headline": "feat(provider): trie iterators (#1189)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-11-07T15:13:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22c3d857ae5ee538e541bd77ad637c590a32198a",
"body": "…187)\n\n* initial cap when allocating keys to peers\n* evaluate leaf case first\n* lazy dests enumeration\n* release slice reference after use\n* single map to avoid merges\n* refactor for improved readability\n* documentation\n* deduplicate keys allocation",
"is_bot": false,
"headline": "refactor(provider): optimize memory when allocating keys to peers (#1…",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-11-07T15:09:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f649c6dd3a806a75ce230c788050150e4212041",
"body": "* refactor(keystore): keep track of size\n\n* pkg godoc\n\n* Keystore default path\n\nUpdate to \"keystore\" only, since it should be a namespace of the\n\"provider\" datastore defined in provider.go.\n\n* persist size on keystore.Close()\n\n* deduplicate put to altDs\n\n* tests\n\n* adding logger to Keystore\n\n* don't\n[…]\n\nsleep for a bit to let the keystore process the Put() operations\npotentially happening after Reset, before getting the size.\n\n* initialize logger\n\n* fix: flaky TestKeystoreResetSizeWithConcurrentPuts",
"is_bot": false,
"headline": "refactor(keystore): track size (#1181)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-11-07T15:03:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3edf259457c0a4cf121eb891779e88eeb7d7d983",
"body": "* Remove go-libp2p-maintainers from codeowners\n\nDoes changing this code owners change the default users who get requested for reviews?\r\n\r\nI don't mind reviewing changes here if necessary, but I don't think it's helpful to always auto-request a review.\n\n* remove CODEOWNERS\n\n* update readme\n\n---------\n\nCo-authored-by: guillaumemichel <guillaume@michel.id>",
"is_bot": false,
"headline": "Remove go-libp2p-maintainers from codeowners (#1192)",
"author_name": "Marco Munizaga",
"author_login": "MarcoPolo",
"committed_at": "2025-11-01T07:19:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d37d0bb82136cf5d56e7e82a2ae9d5356fa89b6",
"body": null,
"is_bot": false,
"headline": "switch to bit256.NewKeyFromArray (#1188)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-31T10:19:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e807b1e8b1b670547e59dabc4aaee8727f9e88b",
"body": "* provider: minor fixes\n\n* fix: RegionsFromPeers may return multiple regions\n\nPreviously RegionsFromPeers would return at most 1 region, since it\ndidn't go down the peers trie to the right depth before splitting the\nregions. This is now corrected.\n\n* improve provider logging\n\n* initial test\n\ntest used to reproduce observed failure\n\n* generic test\n\n* constant size prefix in logs\n\n* return nil instead of emtpy []Region{}",
"is_bot": false,
"headline": "fix(provider): `RegionsFromPeers` may return multiple regions (#1185)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-30T09:41:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "968319a1f598a62585f05f8d3dc43690d55e867c",
"body": "* feat(provider): skip bootstrap reprovide option\n\n* clarify bootstrap behavior\n\n* tests\n\n* docs",
"is_bot": false,
"headline": "feat(provider): skip bootstrap reprovide (#1186)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-30T09:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac6fe178b8c36c2465c28f1c32c97eee8fc7e476",
"body": null,
"is_bot": false,
"headline": "refactor(provider): use adaptive deadline for CycleStats cleanup (#1183)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-30T08:11:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3f8d33dc7819765d044fde39318bd8e35e0ddd9",
"body": "* refactor(provider/stats): use int64 to avoid overflows\n\n* update tests",
"is_bot": false,
"headline": "refactor(provider/stats): use int64 to avoid overflows (#1182)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-28T15:07:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f33906fd2f32a769a62abe6c8932d4f1a0165d1b",
"body": "…1180)",
"is_bot": false,
"headline": "provider: trigger connectivity check when missing libp2p addresses (#…",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-25T12:04:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cfe00692b1f7e262f35aa48f86ffa1c676417c9",
"body": "* provide all keys on start when resume is disabled\n\n* rename KeyStore to Keystore\n\n* don't error if provider is offline\n\nSome public functions such as ProvideOnce, StartProviding, AddToSchedule\nwould error if the provide is offline, because the keys cannot be added\nto the schedule immediately. This\n[…]\nart, since RefreshSchedule\nis called during onOnline() (in addition to after keystore.Reset()).\n\n* remove unused connectivity status\n\n* fix: WithDatastoreWAN uses wanID\n\n* validate loaded avgPrefixLen",
"is_bot": false,
"headline": "fix(provider): resume cycle (#1176)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-25T10:07:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "25cc7945a68a9681ab240ff6ba189731dd80434a",
"body": null,
"is_bot": false,
"headline": "tests: fix flaky TestProvidesExpire (#1179)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-24T22:06:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b89696ec5bae1154db422e2d38d1b2f6ffdd337",
"body": null,
"is_bot": false,
"headline": "tests: fix flaky TestFindPeerWithQueryFilter (#1178)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-24T21:58:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14367eaed5d236017346ce5ba8086e750883dbab",
"body": null,
"is_bot": false,
"headline": "tests: fix #1175 (#1177)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-24T21:48:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0897402ce97673e1e55e7d17037bf864c066e2f",
"body": "…red (#1174)\n\n* provider: exit early region exploration if no new peers discovered\n\n* compare length instead of monitoring new inserts",
"is_bot": false,
"headline": "feat(provider): exit early region exploration if no new peers discove…",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-24T07:01:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77998929a206cfdec629c63f2dd1cfbfe04d3225",
"body": "* provider: protect connections\n\nAdd the option to protect libp2p connections, and keep addresses in the\nlibp2p peerstore during the provide process\n\n* test: WithHost\n\n* dual provider: use WithHost()\n\n* provider/options: error message\n\n* Edit \"missing peer id\" error message to state \"missing peer id and\nhost\". Just one of these 2 is required to derived a (mandatory) peer id.\n* Modified options error message from \"reprovider config:\", to \"provider\nconfig\"",
"is_bot": false,
"headline": "provider: protect connections (#1172)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-24T06:50:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b8fefc2a212152ce5b60589f1f73544ec425c0d",
"body": "* keyspace helpers\n\nCoalesceTrie and SubtractTrie\n\n* reprovide queue: Enqueue multiple prefixes\n\n* increase test coverage\n\n* SubtractTrie: update trie types\n\n* CoalesceTrie: handle empty trie\n\n* resume reprovides\n\n* tests\n\n* fix: datastore race condition\n\n* code reorg\n\n* restore reprovide queue afte\n[…]\nther or\nnot to load the state of the previous execution\n\n* provide queue: purge datastore before persisting\n\n* provider/dual: WithResumeCycle\n\n---------\n\nCo-authored-by: Marcin Rataj <lidel@lidel.org>",
"is_bot": false,
"headline": "feat(provider): resume reprovides (#1170)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-22T07:10:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0eafef6eb5a107b1915f87f69e341968c4cc4356",
"body": null,
"is_bot": false,
"headline": "fix(provider): custom logger name (#1173)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-21T20:34:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "095fe972d6b85f3481660d3e21978d7fdeb88c49",
"body": "* provider: stats\n\n* use proper struct for stats\n\n* provide queue stats\n\n* counting ongoing operations\n\n* provide counts\n\n* floatTimeSeries\n\n* draft: last metrics\n\n* refactor\n\n* gofmt\n\n* tests\n\n* bump reservedpool\n\n* make provider inside buffered.SweepingProvider public\n\n* format\n\n* fix: flaky TestS\n[…]\nst provide queue\n\n* persist & load provide queue to/from datastore\n\n* configure datastore\n\n* test: provide queue persistence after close\n\n* limit batch size\n\n* addressing review\n\n* test: fix edge case",
"is_bot": false,
"headline": "feat(provider): persist provide queue (#1167)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-17T20:20:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "abd04263daac1f86f806a4d5b8ab3b5daf75de66",
"body": "* provider: stats\n\n* use proper struct for stats\n\n* provide queue stats\n\n* counting ongoing operations\n\n* provide counts\n\n* floatTimeSeries\n\n* draft: last metrics\n\n* refactor\n\n* gofmt\n\n* tests\n\n* bump reservedpool\n\n* make provider inside buffered.SweepingProvider public\n\n* format\n\n* fix: flaky TestStats\n\n* avg region size metric\n\n* fix: ongoing provides counter\n\n* float64 avgPrefixLen\n\n* addressing review\n\n* test: fix edge case",
"is_bot": false,
"headline": "provider: stats (#1144)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-17T19:34:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f17c8ec24ecd8666ba40bcd62fa10e4180e09e0a",
"body": "Reusing a datastore Batch is not reliable across all datastores, so do not reuse it.",
"is_bot": false,
"headline": "Update go-dsqueue to version that does not reuse batch (#1169)",
"author_name": "Andrew Gillis",
"author_login": "gammazero",
"committed_at": "2025-10-14T13:21:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e4cda0bf2c0733830641bb940bb0682e8c31b94",
"body": "…1168)\n\nBumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.54.0 to 0.54.1.\n- [Release notes](https://github.com/quic-go/quic-go/releases)\n- [Commits](https://github.com/quic-go/quic-go/compare/v0.54.0...v0.54.1)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/quic\n[…]\ngo\n dependency-version: 0.54.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump github.com/quic-go/quic-go from 0.54.0 to 0.54.1 (#…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-10-10T21:26:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f67e4d8a278d62703f6892be0fc999bba9a31a1f",
"body": null,
"is_bot": false,
"headline": "chore: release v0.35.1 (#1165)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-03T14:38:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60334580206aaf968db994857136f6c5f28be81a",
"body": "* feat: use Trie.AddMany\n\n* use Trie.AddMany in testt\n\n* bump go-libdht to v0.3.0",
"is_bot": false,
"headline": "feat(provider): use Trie.AddMany (#1164)",
"author_name": "Guillaume Michel",
"author_login": "guillaumemichel",
"committed_at": "2025-10-03T08:12:21Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 85,
"commits_last_year": 144,
"latest_release_at": "2026-07-20T20:20:11Z",
"latest_release_tag": "v0.42.1",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 39,
"days_since_latest_release": 5,
"mean_days_between_releases": 20.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/libp2p/go-libp2p-kad-dht",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/libp2p/go-libp2p-kad-dht",
"is_deprecated": false,
"latest_version": "v0.42.1",
"repository_url": "https://github.com/libp2p/go-libp2p-kad-dht",
"versions_count": 106,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-20T20:19:59Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 259,
"stars": 594,
"watchers": 42,
"fork_history": {
"days": [
{
"date": "2016-11-14",
"count": 1
},
{
"date": "2016-12-08",
"count": 1
},
{
"date": "2017-02-22",
"count": 1
},
{
"date": "2017-06-20",
"count": 1
},
{
"date": "2017-06-29",
"count": 1
},
{
"date": "2017-07-04",
"count": 1
},
{
"date": "2017-07-06",
"count": 1
},
{
"date": "2017-07-27",
"count": 1
},
{
"date": "2017-08-01",
"count": 1
},
{
"date": "2017-09-13",
"count": 1
},
{
"date": "2017-09-22",
"count": 1
},
{
"date": "2017-10-18",
"count": 1
},
{
"date": "2017-11-21",
"count": 1
},
{
"date": "2017-12-13",
"count": 1
},
{
"date": "2017-12-18",
"count": 1
},
{
"date": "2018-01-07",
"count": 1
},
{
"date": "2018-01-16",
"count": 1
},
{
"date": "2018-02-28",
"count": 1
},
{
"date": "2018-03-05",
"count": 1
},
{
"date": "2018-03-08",
"count": 1
},
{
"date": "2018-03-13",
"count": 1
},
{
"date": "2018-03-25",
"count": 1
},
{
"date": "2018-04-05",
"count": 1
},
{
"date": "2018-04-22",
"count": 1
},
{
"date": "2018-05-16",
"count": 1
},
{
"date": "2018-05-21",
"count": 1
},
{
"date": "2018-05-24",
"count": 1
},
{
"date": "2018-05-27",
"count": 1
},
{
"date": "2018-07-04",
"count": 1
},
{
"date": "2018-07-07",
"count": 1
},
{
"date": "2018-07-26",
"count": 1
},
{
"date": "2018-07-28",
"count": 1
},
{
"date": "2018-07-30",
"count": 1
},
{
"date": "2018-07-31",
"count": 1
},
{
"date": "2018-08-07",
"count": 2
},
{
"date": "2018-08-16",
"count": 1
},
{
"date": "2018-08-27",
"count": 1
},
{
"date": "2018-08-28",
"count": 1
},
{
"date": "2018-09-06",
"count": 2
},
{
"date": "2018-09-11",
"count": 1
},
{
"date": "2018-09-17",
"count": 2
},
{
"date": "2018-09-21",
"count": 1
},
{
"date": "2018-09-25",
"count": 1
},
{
"date": "2018-10-04",
"count": 1
},
{
"date": "2018-10-20",
"count": 1
},
{
"date": "2018-10-30",
"count": 1
},
{
"date": "2018-11-01",
"count": 1
},
{
"date": "2018-11-15",
"count": 2
},
{
"date": "2018-11-29",
"count": 1
},
{
"date": "2018-12-11",
"count": 1
},
{
"date": "2018-12-20",
"count": 1
},
{
"date": "2018-12-26",
"count": 2
},
{
"date": "2019-01-11",
"count": 1
},
{
"date": "2019-02-19",
"count": 1
},
{
"date": "2019-03-13",
"count": 1
},
{
"date": "2019-03-21",
"count": 1
},
{
"date": "2019-03-22",
"count": 1
},
{
"date": "2019-04-19",
"count": 1
},
{
"date": "2019-05-15",
"count": 1
},
{
"date": "2019-05-21",
"count": 1
},
{
"date": "2019-06-13",
"count": 1
},
{
"date": "2019-06-27",
"count": 1
},
{
"date": "2019-07-10",
"count": 1
},
{
"date": "2019-07-11",
"count": 1
},
{
"date": "2019-07-24",
"count": 1
},
{
"date": "2019-07-31",
"count": 1
},
{
"date": "2019-08-04",
"count": 1
},
{
"date": "2019-08-21",
"count": 1
},
{
"date": "2019-08-26",
"count": 1
},
{
"date": "2019-09-03",
"count": 1
},
{
"date": "2019-09-06",
"count": 1
},
{
"date": "2019-09-12",
"count": 1
},
{
"date": "2019-09-22",
"count": 1
},
{
"date": "2019-10-22",
"count": 1
},
{
"date": "2019-11-01",
"count": 1
},
{
"date": "2019-11-04",
"count": 1
},
{
"date": "2019-11-13",
"count": 1
},
{
"date": "2019-12-20",
"count": 1
},
{
"date": "2020-01-05",
"count": 1
},
{
"date": "2020-01-16",
"count": 1
},
{
"date": "2020-01-21",
"count": 1
},
{
"date": "2020-02-03",
"count": 1
},
{
"date": "2020-02-17",
"count": 1
},
{
"date": "2020-03-09",
"count": 1
},
{
"date": "2020-03-20",
"count": 1
},
{
"date": "2020-03-23",
"count": 1
},
{
"date": "2020-04-01",
"count": 1
},
{
"date": "2020-04-12",
"count": 1
},
{
"date": "2020-04-14",
"count": 1
},
{
"date": "2020-05-13",
"count": 1
},
{
"date": "2020-06-01",
"count": 1
},
{
"date": "2020-06-12",
"count": 1
},
{
"date": "2020-06-13",
"count": 1
},
{
"date": "2020-06-29",
"count": 1
},
{
"date": "2020-07-04",
"count": 1
},
{
"date": "2020-07-08",
"count": 1
},
{
"date": "2020-07-19",
"count": 1
},
{
"date": "2020-08-28",
"count": 1
},
{
"date": "2020-09-08",
"count": 2
},
{
"date": "2020-09-14",
"count": 1
},
{
"date": "2020-09-19",
"count": 1
},
{
"date": "2020-11-03",
"count": 1
},
{
"date": "2020-12-28",
"count": 1
},
{
"date": "2021-01-23",
"count": 1
},
{
"date": "2021-03-22",
"count": 1
},
{
"date": "2021-04-09",
"count": 1
},
{
"date": "2021-05-15",
"count": 1
},
{
"date": "2021-05-26",
"count": 1
},
{
"date": "2021-06-09",
"count": 1
},
{
"date": "2021-06-11",
"count": 1
},
{
"date": "2021-06-14",
"count": 1
},
{
"date": "2021-06-21",
"count": 1
},
{
"date": "2021-07-14",
"count": 1
},
{
"date": "2021-07-23",
"count": 1
},
{
"date": "2021-07-30",
"count": 1
},
{
"date": "2021-08-13",
"count": 1
},
{
"date": "2021-08-20",
"count": 1
},
{
"date": "2021-08-24",
"count": 1
},
{
"date": "2021-09-14",
"count": 1
},
{
"date": "2021-09-17",
"count": 1
},
{
"date": "2021-10-08",
"count": 1
},
{
"date": "2021-10-15",
"count": 1
},
{
"date": "2021-10-23",
"count": 1
},
{
"date": "2021-11-18",
"count": 1
},
{
"date": "2021-12-12",
"count": 1
},
{
"date": "2022-01-21",
"count": 1
},
{
"date": "2022-01-28",
"count": 1
},
{
"date": "2022-02-09",
"count": 1
},
{
"date": "2022-03-09",
"count": 1
},
{
"date": "2022-03-31",
"count": 1
},
{
"date": "2022-04-29",
"count": 1
},
{
"date": "2022-05-10",
"count": 1
},
{
"date": "2022-05-18",
"count": 1
},
{
"date": "2022-05-22",
"count": 1
},
{
"date": "2022-07-07",
"count": 1
},
{
"date": "2022-07-16",
"count": 1
},
{
"date": "2022-07-20",
"count": 1
},
{
"date": "2022-07-23",
"count": 1
},
{
"date": "2022-08-08",
"count": 1
},
{
"date": "2022-08-19",
"count": 1
},
{
"date": "2022-08-23",
"count": 1
},
{
"date": "2022-08-26",
"count": 1
},
{
"date": "2022-09-14",
"count": 2
},
{
"date": "2022-10-24",
"count": 1
},
{
"date": "2022-12-02",
"count": 1
},
{
"date": "2022-12-12",
"count": 1
},
{
"date": "2022-12-27",
"count": 1
},
{
"date": "2023-01-11",
"count": 1
},
{
"date": "2023-02-21",
"count": 1
},
{
"date": "2023-02-22",
"count": 1
},
{
"date": "2023-03-01",
"count": 1
},
{
"date": "2023-03-17",
"count": 1
},
{
"date": "2023-04-05",
"count": 1
},
{
"date": "2023-06-06",
"count": 1
},
{
"date": "2023-06-15",
"count": 1
},
{
"date": "2023-06-23",
"count": 1
},
{
"date": "2023-06-27",
"count": 1
},
{
"date": "2023-07-01",
"count": 1
},
{
"date": "2023-08-10",
"count": 1
},
{
"date": "2023-09-05",
"count": 1
},
{
"date": "2023-09-15",
"count": 1
},
{
"date": "2023-09-18",
"count": 1
},
{
"date": "2023-09-22",
"count": 1
},
{
"date": "2023-10-05",
"count": 1
},
{
"date": "2023-11-08",
"count": 1
},
{
"date": "2023-11-21",
"count": 1
},
{
"date": "2023-11-23",
"count": 1
},
{
"date": "2023-11-27",
"count": 1
},
{
"date": "2023-12-13",
"count": 1
},
{
"date": "2023-12-28",
"count": 1
},
{
"date": "2024-01-11",
"count": 2
},
{
"date": "2024-01-16",
"count": 1
},
{
"date": "2024-01-28",
"count": 1
},
{
"date": "2024-02-07",
"count": 1
},
{
"date": "2024-03-22",
"count": 2
},
{
"date": "2024-03-24",
"count": 1
},
{
"date": "2024-04-05",
"count": 1
},
{
"date": "2024-04-11",
"count": 1
},
{
"date": "2024-06-14",
"count": 1
},
{
"date": "2024-06-27",
"count": 1
},
{
"date": "2024-06-28",
"count": 1
},
{
"date": "2024-07-07",
"count": 1
},
{
"date": "2024-08-27",
"count": 1
},
{
"date": "2024-09-01",
"count": 1
},
{
"date": "2024-09-11",
"count": 1
},
{
"date": "2024-10-04",
"count": 1
},
{
"date": "2024-10-20",
"count": 1
},
{
"date": "2024-11-16",
"count": 1
},
{
"date": "2024-11-28",
"count": 1
},
{
"date": "2024-12-02",
"count": 2
},
{
"date": "2024-12-26",
"count": 1
},
{
"date": "2025-01-09",
"count": 1
},
{
"date": "2025-01-29",
"count": 1
},
{
"date": "2025-02-05",
"count": 2
},
{
"date": "2025-02-07",
"count": 1
},
{
"date": "2025-02-19",
"count": 1
},
{
"date": "2025-02-20",
"count": 1
},
{
"date": "2025-04-08",
"count": 1
},
{
"date": "2025-04-09",
"count": 1
},
{
"date": "2025-04-25",
"count": 1
},
{
"date": "2025-05-01",
"count": 1
},
{
"date": "2025-06-01",
"count": 1
},
{
"date": "2025-06-15",
"count": 1
},
{
"date": "2025-06-28",
"count": 1
},
{
"date": "2025-07-16",
"count": 1
},
{
"date": "2025-07-24",
"count": 1
},
{
"date": "2025-08-02",
"count": 1
},
{
"date": "2025-09-21",
"count": 1
},
{
"date": "2025-10-14",
"count": 1
},
{
"date": "2025-10-17",
"count": 1
},
{
"date": "2025-11-14",
"count": 1
},
{
"date": "2025-12-03",
"count": 1
},
{
"date": "2026-01-28",
"count": 1
},
{
"date": "2026-02-19",
"count": 1
},
{
"date": "2026-04-08",
"count": 1
},
{
"date": "2026-04-12",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-05-28",
"count": 1
},
{
"date": "2026-06-30",
"count": 1
}
],
"complete": true,
"collected": 230,
"total_forks": 259
},
"star_history": null,
"open_issues_and_prs": 58
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"pb/dht.proto"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 107528,
"source_files_sampled": 103,
"oversized_source_files": 3,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "github.com/quic-go/webtransport-go",
"direct": false,
"version": "v0.10.0",
"severity": "moderate",
"ecosystem": "go",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-g35j-m5xg-vh3q"
],
"fixed_version": "0.11.1",
"advisory_count": 1,
"oldest_advisory_days": 1
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.53.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 18
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5942"
],
"fixed_version": "0.56.0",
"advisory_count": 1,
"oldest_advisory_days": 11
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.38.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 11
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 3,
"moderate": 1
},
"advisory_count": 4,
"affected_count": 4,
"assessed_count": 142,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/gammazero/deque",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.1"
},
{
"name": "github.com/google/gopacket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.19"
},
{
"name": "github.com/google/uuid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/guillaumemichel/reservedpool",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
},
{
"name": "github.com/hashicorp/golang-lru",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.2"
},
{
"name": "github.com/ipfs/boxo",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.41.0"
},
{
"name": "github.com/ipfs/go-cid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.2"
},
{
"name": "github.com/ipfs/go-datastore",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.2"
},
{
"name": "github.com/ipfs/go-detect-race",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.1"
},
{
"name": "github.com/ipfs/go-ds-pebble",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.12"
},
{
"name": "github.com/ipfs/go-dsqueue",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.0"
},
{
"name": "github.com/ipfs/go-libdht",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.5.0"
},
{
"name": "github.com/ipfs/go-log/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.9.2"
},
{
"name": "github.com/ipfs/go-test",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.1"
},
{
"name": "github.com/libp2p/go-libp2p",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.48.0"
},
{
"name": "github.com/libp2p/go-libp2p-kbucket",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.9.0"
},
{
"name": "github.com/libp2p/go-libp2p-record",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.1"
},
{
"name": "github.com/libp2p/go-libp2p-routing-helpers",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.5"
},
{
"name": "github.com/libp2p/go-libp2p-testing",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.12.0"
},
{
"name": "github.com/libp2p/go-libp2p-xor",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.0"
},
{
"name": "github.com/libp2p/go-msgio",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
},
{
"name": "github.com/libp2p/go-netroute",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.0"
},
{
"name": "github.com/multiformats/go-base32",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.0"
},
{
"name": "github.com/multiformats/go-multiaddr",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.16.1"
},
{
"name": "github.com/multiformats/go-multibase",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
},
{
"name": "github.com/multiformats/go-multihash",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.3"
},
{
"name": "github.com/multiformats/go-multistream",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.1"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/whyrusleeping/go-keyspace",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20160322163242-5b898ac5add1"
},
{
"name": "go.opentelemetry.io/otel",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/trace",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.uber.org/zap",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.28.0"
},
{
"name": "gonum.org/v1/gonum",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.17.0"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.36.11"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/gammazero/deque",
"direct": true,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/google/gopacket",
"direct": true,
"version": "v1.1.19",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/guillaumemichel/reservedpool",
"direct": true,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/golang-lru",
"direct": true,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/boxo",
"direct": true,
"version": "v0.41.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-cid",
"direct": true,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-datastore",
"direct": true,
"version": "v0.9.2",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-detect-race",
"direct": true,
"version": "v0.0.1",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-ds-pebble",
"direct": true,
"version": "v0.5.12",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-dsqueue",
"direct": true,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-libdht",
"direct": true,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-log/v2",
"direct": true,
"version": "v2.9.2",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-test",
"direct": true,
"version": "v0.4.1",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-libp2p",
"direct": true,
"version": "v0.48.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-libp2p-kbucket",
"direct": true,
"version": "v0.9.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-libp2p-record",
"direct": true,
"version": "v0.3.1",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-libp2p-routing-helpers",
"direct": true,
"version": "v0.7.5",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-libp2p-testing",
"direct": true,
"version": "v0.12.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-libp2p-xor",
"direct": true,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-msgio",
"direct": true,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-netroute",
"direct": true,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-base32",
"direct": true,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multiaddr",
"direct": true,
"version": "v0.16.1",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multibase",
"direct": true,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multihash",
"direct": true,
"version": "v0.2.3",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multistream",
"direct": true,
"version": "v0.6.1",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "github.com/whyrusleeping/go-keyspace",
"direct": true,
"version": "v0.0.0-20160322163242-5b898ac5add1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": true,
"version": "v1.28.0",
"ecosystem": "go"
},
{
"name": "gonum.org/v1/gonum",
"direct": true,
"version": "v0.17.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": true,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "filippo.io/bigmod",
"direct": false,
"version": "v0.1.1-0.20260103110540-f8a47775ebe5",
"ecosystem": "go"
},
{
"name": "filippo.io/keygen",
"direct": false,
"version": "v0.0.0-20260114151900-8e2790ea4c5b",
"ecosystem": "go"
},
{
"name": "github.com/benbjohnson/clock",
"direct": false,
"version": "v1.3.5",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/crlib",
"direct": false,
"version": "v0.0.0-20241112164430-1264a2edc35b",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/errors",
"direct": false,
"version": "v1.11.3",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/logtags",
"direct": false,
"version": "v0.0.0-20230118201751-21c54148d20b",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/pebble/v2",
"direct": false,
"version": "v2.1.6",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/redact",
"direct": false,
"version": "v1.1.5",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/swiss",
"direct": false,
"version": "v0.0.0-20251224182025-b0f6560f979b",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/tokenbucket",
"direct": false,
"version": "v0.0.0-20230807174530-cc333fc44b06",
"ecosystem": "go"
},
{
"name": "github.com/datadog/zstd",
"direct": false,
"version": "v1.5.7",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/davidlazar/go-crypto",
"direct": false,
"version": "v0.0.0-20200604182044-b73af7476f6c",
"ecosystem": "go"
},
{
"name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
"direct": false,
"version": "v4.4.1",
"ecosystem": "go"
},
{
"name": "github.com/dunglas/httpsfv",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/filecoin-project/go-clock",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/flynn/noise",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/getsentry/sentry-go",
"direct": false,
"version": "v0.27.0",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/gogo/protobuf",
"direct": false,
"version": "v1.3.2",
"ecosystem": "go"
},
{
"name": "github.com/golang/snappy",
"direct": false,
"version": "v0.0.5-0.20231225225746-43d5d4cd4e0e",
"ecosystem": "go"
},
{
"name": "github.com/gorilla/websocket",
"direct": false,
"version": "v1.5.3",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/golang-lru/v2",
"direct": false,
"version": "v2.0.7",
"ecosystem": "go"
},
{
"name": "github.com/huin/goupnp",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/ipfs/go-block-format",
"direct": false,
"version": "v0.2.4",
"ecosystem": "go"
},
{
"name": "github.com/ipld/go-ipld-prime",
"direct": false,
"version": "v0.24.0",
"ecosystem": "go"
},
{
"name": "github.com/jackpal/go-nat-pmp",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/jbenet/go-temp-err-catcher",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/jorropo/jsync",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.18.0",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/cpuid/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/koron/go-ssdp",
"direct": false,
"version": "v0.0.6",
"ecosystem": "go"
},
{
"name": "github.com/kr/pretty",
"direct": false,
"version": "v0.3.1",
"ecosystem": "go"
},
{
"name": "github.com/kr/text",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-buffer-pool",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-cidranger",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-flow-metrics",
"direct": false,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-libp2p-asn-util",
"direct": false,
"version": "v0.4.1",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-reuseport",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-yamux/v5",
"direct": false,
"version": "v5.0.1",
"ecosystem": "go"
},
{
"name": "github.com/marten-seemann/tcp",
"direct": false,
"version": "v0.0.0-20210406111302-dfbc87cc63fd",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.22",
"ecosystem": "go"
},
{
"name": "github.com/mikioh/tcpinfo",
"direct": false,
"version": "v0.0.0-20190314235526-30a79bb1804b",
"ecosystem": "go"
},
{
"name": "github.com/mikioh/tcpopt",
"direct": false,
"version": "v0.0.0-20190314235656-172688c1accc",
"ecosystem": "go"
},
{
"name": "github.com/minio/minlz",
"direct": false,
"version": "v1.0.1-0.20250507153514-87eb42fe8882",
"ecosystem": "go"
},
{
"name": "github.com/minio/sha256-simd",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/mr-tron/base58",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-base36",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multiaddr-dns",
"direct": false,
"version": "v0.5.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multiaddr-fmt",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-multicodec",
"direct": false,
"version": "v0.10.0",
"ecosystem": "go"
},
{
"name": "github.com/multiformats/go-varint",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/pbnjay/memory",
"direct": false,
"version": "v0.0.0-20210728143218-7b4eea64cf58",
"ecosystem": "go"
},
{
"name": "github.com/pion/datachannel",
"direct": false,
"version": "v1.5.10",
"ecosystem": "go"
},
{
"name": "github.com/pion/dtls/v3",
"direct": false,
"version": "v3.1.2",
"ecosystem": "go"
},
{
"name": "github.com/pion/ice/v4",
"direct": false,
"version": "v4.0.10",
"ecosystem": "go"
},
{
"name": "github.com/pion/interceptor",
"direct": false,
"version": "v0.1.40",
"ecosystem": "go"
},
{
"name": "github.com/pion/logging",
"direct": false,
"version": "v0.2.4",
"ecosystem": "go"
},
{
"name": "github.com/pion/mdns/v2",
"direct": false,
"version": "v2.0.7",
"ecosystem": "go"
},
{
"name": "github.com/pion/randutil",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/pion/rtcp",
"direct": false,
"version": "v1.2.16",
"ecosystem": "go"
},
{
"name": "github.com/pion/rtp",
"direct": false,
"version": "v1.8.19",
"ecosystem": "go"
},
{
"name": "github.com/pion/sctp",
"direct": false,
"version": "v1.8.39",
"ecosystem": "go"
},
{
"name": "github.com/pion/sdp/v3",
"direct": false,
"version": "v3.0.18",
"ecosystem": "go"
},
{
"name": "github.com/pion/srtp/v3",
"direct": false,
"version": "v3.0.6",
"ecosystem": "go"
},
{
"name": "github.com/pion/stun/v3",
"direct": false,
"version": "v3.1.1",
"ecosystem": "go"
},
{
"name": "github.com/pion/transport/v3",
"direct": false,
"version": "v3.0.7",
"ecosystem": "go"
},
{
"name": "github.com/pion/transport/v4",
"direct": false,
"version": "v4.0.1",
"ecosystem": "go"
},
{
"name": "github.com/pion/turn/v4",
"direct": false,
"version": "v4.0.2",
"ecosystem": "go"
},
{
"name": "github.com/pion/webrtc/v4",
"direct": false,
"version": "v4.1.2",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/polydawn/refmt",
"direct": false,
"version": "v0.90.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": false,
"version": "v1.23.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.67.5",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.20.1",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/qpack",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/quic-go",
"direct": false,
"version": "v0.59.1",
"ecosystem": "go"
},
{
"name": "github.com/quic-go/webtransport-go",
"direct": false,
"version": "v0.10.0",
"ecosystem": "go"
},
{
"name": "github.com/raduberinde/axisds",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/raduberinde/btreemap",
"direct": false,
"version": "v0.0.0-20250419174037-3d62b7205d54",
"ecosystem": "go"
},
{
"name": "github.com/rogpeppe/go-internal",
"direct": false,
"version": "v1.14.1",
"ecosystem": "go"
},
{
"name": "github.com/spaolacci/murmur3",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/wlynxg/anet",
"direct": false,
"version": "v0.0.5",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.uber.org/dig",
"direct": false,
"version": "v1.19.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/fx",
"direct": false,
"version": "v1.24.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/mock",
"direct": false,
"version": "v0.5.2",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v2",
"direct": false,
"version": "v2.4.4",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": false,
"version": "v0.53.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": false,
"version": "v0.0.0-20260603202125-055de637280b",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.55.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.21.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.46.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/telemetry",
"direct": false,
"version": "v0.0.0-20260508192327-42602be52be6",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.38.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.12.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "lukechampine.com/blake3",
"direct": false,
"version": "v1.4.1",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 142,
"direct_count": 35,
"indirect_count": 107
}
},
"maintainership": {
"issues": {
"open_prs": 9,
"merged_prs": 720,
"open_issues": 49,
"closed_ratio": 0.864,
"closed_issues": 311,
"closed_unmerged_prs": 195
},
"bus_factor": 3,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "Stebalien",
"commits": 427,
"avatar_url": "https://avatars.githubusercontent.com/u/310393?v=4"
},
{
"type": "User",
"login": "whyrusleeping",
"commits": 340,
"avatar_url": "https://avatars.githubusercontent.com/u/1243164?v=4"
},
{
"type": "User",
"login": "guillaumemichel",
"commits": 231,
"avatar_url": "https://avatars.githubusercontent.com/u/15075495?v=4"
},
{
"type": "User",
"login": "jbenet",
"commits": 167,
"avatar_url": "https://avatars.githubusercontent.com/u/138401?v=4"
},
{
"type": "User",
"login": "aschmahmann",
"commits": 103,
"avatar_url": "https://avatars.githubusercontent.com/u/2733228?v=4"
},
{
"type": "User",
"login": "web3-bot",
"commits": 48,
"avatar_url": "https://avatars.githubusercontent.com/u/81333946?v=4"
},
{
"type": "User",
"login": "aarshkshah1992",
"commits": 43,
"avatar_url": "https://avatars.githubusercontent.com/u/3341710?v=4"
},
{
"type": "User",
"login": "raulk",
"commits": 37,
"avatar_url": "https://avatars.githubusercontent.com/u/1101242?v=4"
},
{
"type": "User",
"login": "anacrolix",
"commits": 35,
"avatar_url": "https://avatars.githubusercontent.com/u/988750?v=4"
},
{
"type": "User",
"login": "vyzo",
"commits": 35,
"avatar_url": "https://avatars.githubusercontent.com/u/36426?v=4"
}
],
"contributors_sampled": 81,
"top_contributor_share": 0.232
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"generated-pr.yml",
"go-check.yml",
"go-test.yml",
"release-check.yml",
"releaser.yml",
"stale.yml",
"tagpush.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 4,
"reason": "Found 13/27 approved changesets -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 82 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 6,
"reason": "4 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "7b897dcea115a0bcf707ce04b526206bc550576f",
"ran_at": "2026-07-26T06:19:04Z",
"aggregate_score": 5.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-26T03:14:36Z",
"oldest_open_prs": [
{
"number": 388,
"created_at": "2019-09-02T13:55:48Z",
"last_comment_at": "2019-12-15T06:25:02Z",
"last_comment_author": "aarshkshah1992"
},
{
"number": 626,
"created_at": "2020-04-30T18:22:38Z",
"last_comment_at": "2020-05-01T13:25:38Z",
"last_comment_author": "aschmahmann"
},
{
"number": 650,
"created_at": "2020-05-20T13:21:50Z",
"last_comment_at": "2020-05-22T06:27:16Z",
"last_comment_author": "aarshkshah1992"
},
{
"number": 655,
"created_at": "2020-05-27T16:36:48Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 730,
"created_at": "2021-07-22T17:54:03Z",
"last_comment_at": "2021-09-15T14:58:42Z",
"last_comment_author": "aschmahmann"
},
{
"number": 962,
"created_at": "2024-01-27T15:55:39Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1084,
"created_at": "2025-05-13T16:02:09Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1266,
"created_at": "2026-06-17T16:31:03Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1288,
"created_at": "2026-07-21T19:42:56Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-20T20:20:00Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 3,
"created_at": "2016-08-22T16:38:54Z",
"last_comment_at": "2021-12-02T07:11:30Z",
"last_comment_author": "stefanhans"
},
{
"number": 145,
"created_at": "2018-05-05T02:06:02Z",
"last_comment_at": "2018-08-06T19:48:22Z",
"last_comment_author": "Stebalien"
},
{
"number": 252,
"created_at": "2019-02-07T23:36:18Z",
"last_comment_at": "2019-03-07T04:17:50Z",
"last_comment_author": "anacrolix"
},
{
"number": 254,
"created_at": "2019-02-08T00:09:06Z",
"last_comment_at": "2023-10-30T00:41:13Z",
"last_comment_author": "master255"
},
{
"number": 256,
"created_at": "2019-02-11T15:58:28Z",
"last_comment_at": "2020-03-10T13:50:06Z",
"last_comment_author": "daviddias"
},
{
"number": 302,
"created_at": "2019-03-14T21:30:32Z",
"last_comment_at": "2019-03-19T00:22:30Z",
"last_comment_author": "Stebalien"
},
{
"number": 304,
"created_at": "2019-03-21T02:00:58Z",
"last_comment_at": "2019-03-21T03:59:50Z",
"last_comment_author": "anacrolix"
},
{
"number": 323,
"created_at": "2019-04-18T12:07:42Z",
"last_comment_at": "2025-03-17T08:23:33Z",
"last_comment_author": "guillaumemichel"
},
{
"number": 331,
"created_at": "2019-05-03T11:28:00Z",
"last_comment_at": "2019-05-06T15:54:52Z",
"last_comment_author": "gpestana"
},
{
"number": 337,
"created_at": "2019-05-20T16:35:49Z",
"last_comment_at": "2019-09-04T22:20:01Z",
"last_comment_author": "anacrolix"
},
{
"number": 345,
"created_at": "2019-05-30T11:33:52Z",
"last_comment_at": "2021-07-22T18:19:22Z",
"last_comment_author": "Stebalien"
},
{
"number": 386,
"created_at": "2019-08-29T13:59:38Z",
"last_comment_at": "2019-11-06T14:45:05Z",
"last_comment_author": "aarshkshah1992"
},
{
"number": 387,
"created_at": "2019-08-30T20:18:22Z",
"last_comment_at": "2024-09-18T12:27:10Z",
"last_comment_author": "burdiyan"
},
{
"number": 439,
"created_at": "2020-01-22T00:08:28Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 807,
"created_at": "2020-02-20T16:58:52Z",
"last_comment_at": "2020-04-22T14:27:30Z",
"last_comment_author": "jacobheun"
},
{
"number": 483,
"created_at": "2020-03-06T20:44:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 528,
"created_at": "2020-04-02T17:22:28Z",
"last_comment_at": "2020-05-12T15:33:09Z",
"last_comment_author": "Stebalien"
},
{
"number": 529,
"created_at": "2020-04-02T17:28:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 532,
"created_at": "2020-04-02T22:40:20Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 535,
"created_at": "2020-04-03T01:39:46Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/libp2p/go-libp2p-kad-dht",
"host": "github.com",
"name": "go-libp2p-kad-dht",
"owner": "libp2p"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"security": 61,
"vitality": 95,
"community": 63,
"governance": 82,
"engineering": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 95,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 91,
"inputs": {
"commits_last_year": 144,
"human_commit_share": 0.93,
"days_since_last_push": 3,
"active_weeks_last_year": 39
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "39/52 weeks with commits",
"points": 27,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 39
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "144 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 144
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 85,
"latest_release_tag": "v0.42.1",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 20.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "85 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 85
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~20.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 20.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 5,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 5 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 5
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 63,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"forks": 259,
"stars": 594,
"watchers": 42,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "594 stars",
"points": 45,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 594
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "259 forks",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 259
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "42 watchers",
"points": 9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 42
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 82,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 81,
"top_contributor_share": 0.232
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 23% of commits",
"points": 17.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 23
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "81 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 81
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 82 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"merged_prs": 720,
"open_issues": 49,
"closed_issues": 311,
"issue_closed_ratio": 0.864,
"closed_unmerged_prs": 195
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "86% of issues closed",
"points": 40.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 86
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "720/915 decided PRs merged",
"points": 30.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 720,
"decided": 915
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 13/27 approved changesets -- score normalized to 4",
"points": 6,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"followers": 1328,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "libp2p",
"public_repos": 275,
"account_age_days": 3956
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,328 followers of libp2p",
"points": 22.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1328,
"login": "libp2p"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "275 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 275
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/libp2p/go-libp2p-kad-dht"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "106 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 106
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 67,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "7 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 7
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"libp2p",
"dht",
"ipfs",
"kad-dht"
],
"has_wiki": false,
"homepage": "https://github.com/libp2p/specs/tree/master/kad-dht",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://github.com/libp2p/specs/tree/master/kad-dht",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 61,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 13/27 approved changesets -- score normalized to 4",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 82 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "4 existing vulnerabilities detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 142 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 142
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 4,
"affected_packages": 4,
"assessed_packages": 142,
"unassessed_packages": 0,
"affected_by_severity": "moderate 1, unknown 3",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 142,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 30
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "93 of 93 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 93,
"sampled": 93
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.07
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "7 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 7,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 107528,
"source_files_sampled": 103,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/103 source files over 60KB",
"points": 53.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 103,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"pb/dht.proto"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "pb/dht.proto",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "pb/dht.proto"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-26T06:19:30.715404Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/l/libp2p/go-libp2p-kad-dht.svg",
"full_name": "libp2p/go-libp2p-kad-dht",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.