Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-27 15:54 UTC
masudur-rahman / styx
Database Engine for different SQL and NoSQL databases
masudur-rahman/styx holds a health index of 54 out of 100, placing it in the Moderate band. It scores highest on Vitality (76/100) and lowest on Community & Adoption (24/100). It was last updated 2 days ago. A single contributor accounts for most of its recent work.
54
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
54
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Masudur RahmanPersonal account
81 followers69 public repossince Aug 2015Pathao (Pay Engineering - Pathao Pay)
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/masudur-rahman/styx/v2 | v2.0.0 | - | 1 | 2 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
76
Development activity
66Moderate
How it's scored
| 36/36 | Push recency — last push 2 days ago |
| 4.2/36 | Commit cadence — 6/52 weeks with commits |
| 15.6/18 | Commit volume — 53 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 29 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 53 |
| human_commit_share | 1 |
| days_since_last_push | 2 |
| active_weeks_last_year | 6 |
Release discipline
92Excellent
How it's scored
| 27/27 | Ships releases — 2 releases published |
| 36/36 | Release recency — latest release 2 days ago |
| 19.8/27 | Release cadence — a release every ~98.9 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 2 |
| latest_release_tag | v2.0.0 |
| releases_from_tags | no |
| days_since_latest_release | 2 |
| mean_days_between_releases | 98.9 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
24
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 1 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 1 watchers |
Inputs used
| forks | 0 |
| stars | 1 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
51
Maintainer resilience (bus factor)
13Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
62Moderate
How it's scored
| 23.4/46.8 | Issue resolution — 50% of issues closed |
| 38.2/38.3 | PR acceptance — 10/10 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/6 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 10 |
| open_issues | 1 |
| closed_issues | 1 |
| issue_closed_ratio | 0.5 |
| closed_unmerged_prs | 0 |
Ownership & stewardship
61Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 13.8/25 | Owner reach — 81 followers of masudur-rahman |
| 25/25 | Track record — 69 public repos, account ~10 yr old |
Inputs used
| followers | 81 |
| owner_type | User |
| is_verified | — |
| owner_login | masudur-rahman |
| public_repos | 69 |
| account_age_days | 3,992 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
84Good
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 2 days ago |
| 4/20 | Version history — 1 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/masudur-rahman/styx/v2 |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 2 |
Engineering Quality
Are baseline engineering and documentation practices in place?
71
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 3 out of 3 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
75Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 10/10 | Topics — 9 topics |
| 0/10 | Wiki |
Inputs used
| topics | arangodb, go, golang, orm, postgres, postgresql, sqlite, go-orm, golang-orm |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
38
Security posture
35At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 3 out of 3 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/6 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 29 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 2/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 4 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 23 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3.5 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
48At risk
How it's scored
| 8/35 | Direct dependencies free of known advisories — 2 affected: google.golang.org/grpc v1.55.0 (critical 9.1), google.golang.org/protobuf v1.30.0 (high 7.5) |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 28.3/40 | No advisories left outstanding — 2 advisory-carrying package(s) unaddressed past 90 days; oldest published 1,005 days ago |
Inputs used
| source | osv |
| advisories | 32 |
| affected_packages | 5 |
| assessed_packages | 35 |
| unassessed_packages | 0 |
| affected_by_severity | critical 1, high 2, unknown 2 |
| direct_affected_packages | 2 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 35 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
56
Agent context & guidance
30At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 30.5/40 | Legible commit history — 52 of 91 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.571 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
65Moderate
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 91 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 4/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 4 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/76 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 30,761 |
| source_files_sampled | 76 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
1GitHub stars
1contributors
53commits, last 12 months
2days since last push
2releases
1bus factor
1open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
OpenSSF Scorecard 3.5 / 10
3.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 3 out of 3 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/6 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 29 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 4 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 4 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 23 existing vulnerabilities detected |
Direct dependencies 10
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/arangodb/go-driver | v1.6.0 | go.mod |
| Go | github.com/golang/mock | v1.6.0 | go.mod |
| Go | github.com/iancoleman/strcase | v0.2.0 | go.mod |
| Go | github.com/lib/pq | v1.10.9 | go.mod |
| Go | github.com/nedpals/supabase-go | v0.3.0 | go.mod |
| Go | github.com/rs/xid | v1.5.0 | go.mod |
| Go | github.com/stretchr/testify | v1.8.4 | go.mod |
| Go | google.golang.org/grpc | v1.55.0 | go.mod |
| Go | google.golang.org/protobuf | v1.30.0 | go.mod |
| Go | modernc.org/sqlite | v1.29.2 | go.mod |
All dependencies 35
Full resolved dependency set from the GitHub dependency graph: 10 direct and 25 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/arangodb/go-driver | v1.6.0 | direct |
| Go | github.com/golang/mock | v1.6.0 | direct |
| Go | github.com/iancoleman/strcase | v0.2.0 | direct |
| Go | github.com/lib/pq | v1.10.9 | direct |
| Go | github.com/nedpals/supabase-go | v0.3.0 | direct |
| Go | github.com/rs/xid | v1.5.0 | direct |
| Go | github.com/stretchr/testify | v1.8.4 | direct |
| Go | google.golang.org/grpc | v1.55.0 | direct |
| Go | google.golang.org/protobuf | v1.30.0 | direct |
| Go | modernc.org/sqlite | v1.29.2 | direct |
| Go | github.com/arangodb/go-velocypack | v0.0.0-20200318135517-5af53c29c67e | indirect |
| Go | github.com/davecgh/go-spew | v1.1.1 | indirect |
| Go | github.com/dustin/go-humanize | v1.0.1 | indirect |
| Go | github.com/golang/protobuf | v1.5.3 | indirect |
| Go | github.com/google/go-querystring | v1.1.0 | indirect |
| Go | github.com/google/uuid | v1.3.0 | indirect |
| Go | github.com/hashicorp/golang-lru/v2 | v2.0.7 | indirect |
| Go | github.com/mattn/go-isatty | v0.0.16 | indirect |
| Go | github.com/mattn/go-sqlite3 | v1.14.19 | indirect |
| Go | github.com/ncruces/go-strftime | v0.1.9 | indirect |
| Go | github.com/nedpals/postgrest-go | v0.1.3 | indirect |
| Go | github.com/pkg/errors | v0.9.1 | indirect |
| Go | github.com/pmezard/go-difflib | v1.0.0 | indirect |
| Go | github.com/remyoudompheng/bigfft | v0.0.0-20230129092748-24d4a6f8daec | indirect |
| Go | golang.org/x/net | v0.8.0 | indirect |
| Go | golang.org/x/sys | v0.16.0 | indirect |
| Go | golang.org/x/text | v0.8.0 | indirect |
| Go | google.golang.org/genproto | v0.0.0-20230306155012-7f2fa6fef1f4 | indirect |
| Go | gopkg.in/yaml.v3 | v3.0.1 | indirect |
| Go | modernc.org/gc/v3 | v3.0.0-20240107210532-573471604cb6 | indirect |
| Go | modernc.org/libc | v1.41.0 | indirect |
| Go | modernc.org/mathutil | v1.6.0 | indirect |
| Go | modernc.org/memory | v1.7.2 | indirect |
| Go | modernc.org/strutil | v1.2.0 | indirect |
| Go | modernc.org/token | v1.1.0 | indirect |
Dependency advisories 5
This repository publishes no package the index resolves, so its own dependency graph was assessed — 35 packages, which also include development and test pins that never ship: 5 carry known advisories, of which 2 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| google.golang.org/grpc | v1.55.0 | direct | critical | 5 | 1.82.1 |
| google.golang.org/protobuf | v1.30.0 | direct | high | 2 | 1.33.0 |
| golang.org/x/net | v0.8.0 | indirect | high | 23 | 12.0.2 |
| golang.org/x/sys | v0.16.0 | indirect | unknown | 1 | 0.44.0 |
| golang.org/x/text | v0.8.0 | indirect | unknown | 1 | 0.39.0 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"arangodb",
"go",
"golang",
"orm",
"postgres",
"postgresql",
"sqlite",
"go-orm",
"golang-orm"
],
"is_fork": false,
"size_kb": 315,
"has_wiki": false,
"homepage": null,
"languages": {
"Go": 258074,
"Shell": 3064,
"Makefile": 18585
},
"pushed_at": "2026-07-25T11:50:31Z",
"created_at": "2023-06-03T17:48:52Z",
"owner_type": "User",
"updated_at": "2026-07-25T11:48:57Z",
"description": "Database Engine for different SQL and NoSQL databases",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://mrahman.xyz",
"name": "Masudur Rahman",
"type": "User",
"login": "masudur-rahman",
"company": "Pathao (Pay Engineering - Pathao Pay)",
"location": "Dhaka, Bangladesh",
"followers": 81,
"avatar_url": "https://avatars.githubusercontent.com/u/13915755?v=4",
"created_at": "2015-08-22T09:30:40Z",
"is_verified": null,
"public_repos": 69,
"account_age_days": 3992
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-07-25T11:51:42Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-04-17T15:27:16Z"
}
],
"recent_commits": [
{
"oid": "8d081539cc663d633397656c8cb891899e1f6f7e",
"body": "Migrate module path to v2\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Merge pull request #12 from masudur-rahman/chore/v2-module-path",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-25T11:48:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46ad90c26848c748544dc280fe068ba93ad2889a",
"body": "- Bump module github.com/masudur-rahman/styx -> .../styx/v2\n- Update all import paths across sources and examples\n- Update README and docs import/go get paths\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Migrate module path to v2",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-25T11:11:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db55ee031ec279405c84fd1fe17b5695444a2478",
"body": "Add db:\"-\" ignore and notnull struct tags\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Merge pull request #11 from masudur-rahman/fix/ignore-and-notnull-tags",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-25T10:56:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ece16d1c836aae4cf86fbcbdba09f2acb52e750c",
"body": "- Demonstrate ignore tag round-trip and NOT NULL rejection\n- List the example in the README examples table\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add runnable example for db:\"-\" and notnull tags",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-25T10:49:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b35fbec6d6bf178a792c25b29662351ddf7fcd33",
"body": "- Add notnull db-tag keyword emitting a NOT NULL constraint in DDL for both dialects\n- Document the notnull and db:\"-\" ignore tags in the README tag reference\n- Cover with createTableQuery unit tests and a SQLite constraint-violation test\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Support notnull tag for NOT NULL columns",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-25T10:45:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8759491f9fb67bf07d66871742e888333fc9662",
"body": "- Add core.IsIgnoredField and exclude db:\"-\" fields from the field map\n- Skip ignored fields in DDL, INSERT, bulk INSERT, and UPDATE for both dialects\n- Prevents a db:\"-\" field from creating an invalid \"-\" column\n- Cover with core unit tests and a SQLite round-trip integration test\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Support db:\"-\" tag to ignore struct fields",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-25T10:45:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6629481cbf3e5f8ad4d6d8b053009c1b92d587f6",
"body": "Production-grade Postgres & SQLite: relationships, query builder, migrations, and observability\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Merge pull request #10 from masudur-rahman/feature/bulk-hooks-validation",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-25T05:48:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fe03f9c14c72a33d287209c6c595e6056c0fc7f",
"body": "- Replace Count/Sum/Avg/Min/Max Engine methods with sql.Aggregate helpers and Select\n- Add terminal Count(ctx) returning an int64 row count\n- Register each model's soft-delete column at Sync so Count excludes deleted rows by default\n- Honor WithDeleted on Count to include soft-deleted rows\n- Cover both dialects with unit, integration, and runnable examples\n- Update README aggregates and Count docs\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add aggregate expression builder and terminal Count",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-25T05:34:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22f43b3de3ca968877d2fb7376077f11d093d08c",
"body": "- Add the five new examples to the Examples table\n- Add With/Preload rows to the query-building reference\n- Add CTE, connection pooling, observability, and stmt-cache sections\n- Expand schema migration section with the versioned runner\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Document CTE, pooling, observability, caching, migrations in README",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T19:07:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee70222f4644fab21d91d8bc9ce102c0b62b51f6",
"body": "- StmtCache memoises prepared statements by SQL text on the non-tx path\n- Engine construction moves to functional options (WithObserver, WithStmtCache)\n- Thread cache through all read/insert/bulk/write execute paths\n- Add cache unit tests and a runnable stmt-cache example\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add opt-in prepared statement caching",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T19:04:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4d7e35c814e8a0084d097f69a83d4a1a100ea7d",
"body": "- migrate.Migrator applies/reverses ordered Go-func migrations\n- Records applied versions in schema_migrations; Up is idempotent\n- Each migration runs in its own transaction\n- Fix Exec/Query to honor an active transaction\n- Add migrate tests and runnable example\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add versioned migration runner",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T18:57:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b935e9278d2e6812489d89520f903269d0d5f438",
"body": "- Observer.OnQuery reports query, args, duration, and error per statement\n- SQLite and Postgres engines take an optional Observer at construction\n- Instrument all read/insert/bulk/write execute paths via deferred callback\n- Add runnable observer example\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add query observer for logging, metrics, tracing",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T18:51:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f99828c97f537b7d2ffd9ccfaee9574d1ffd230b",
"body": "- PoolConfig.Apply sets only non-zero pool settings on the *sql.DB\n- Engine.Stats exposes live pool statistics\n- Get{SQLite,Postgres}Connection take an optional PoolConfig\n- Add runnable pool example\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add connection pool config and stats",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T18:45:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf31e1a18afc0f37e774c1697af38fc48324691d",
"body": "- Engine.With(name, sub) compiles a sub-Engine to a subquery and emits WITH\n- SQLite prepends positional CTE args; Postgres renumbers $N and appends\n- Add lib unit tests for both dialects and a runnable CTE example\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add CTE query builder via With",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T18:40:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99f0ab1e608a4b580422468ed44aeaaea98e4d8d",
"body": "- has_many -> o2m, belongs_to -> m2o, many_to_many -> m2m\n- unique_idx -> uidx (and uidx:<name> for named/composite)\n- Update code, tests, examples, and docs\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Shorten relationship and unique-index tag keywords",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T07:32:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e16f1c89f7fa4f756064574ddb8c3eb805a20e3c",
"body": "- Add Relationship Options table (belongs_to/has_many/many_to_many + fk/ref/join)\n- Document named/composite index tags (idx:<name>, unique_idx:<name>)\n- Expand validation rules into a table with params, target types, and notes\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Consolidate tag and validation reference in README",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T07:08:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08b3fa1f993f763674540eea7f0e732a211cd535",
"body": "- Rename database.go to engine.go (holds only the Engine interface)\n- Move reflection, relations, and hook runners to sql/internal/core\n- Keep only Engine and the hook interfaces exported from sql\n- Rewire postgres/sqlite engines and lib to use internal/core\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Reorganize sql package: minimal public API, plumbing in internal/core",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T07:01:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f5a1b8687f0c3dcb82faa0fe96b227a80654cc6",
"body": "- Use the terser `archive` keyword, consistent with uq/uqs/pk/req\n- Update reflect/table_sync lookups, example, and docs\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Rename soft_delete tag to archive",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T06:38:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80f95539f82d6e3c89b82da3f09824e3aa1ebb23",
"body": "- Add docs/migrations.md: additive auto-sync vs versioned destructive changes\n- Add expand-migrate-contract guidance for in-place changes\n- Add repeated-Sync idempotency test\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Document migration strategy and test Sync idempotency",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T03:34:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f586d8a06c3be150ec158c8b9c6a09f8e8003de",
"body": "- Add runnable Preload example (has_many, belongs_to, many_to_many)\n- Document association tags and Preload usage in README\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add relationships example and README docs",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T03:33:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9835690a058c5282c8fbf5d4ed1bb96e404f5319",
"body": "- Add has_many/belongs_to/many_to_many db-tag associations (sql/relations.go)\n- Add Engine.Preload with batched, N+1-free eager loading\n- Exclude relation fields from DDL, INSERT, and UPDATE\n- Implement Preload across engines; stub in supabase, pg-grpc, and mock\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add relationship associations and Preload",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-23T03:33:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a11b5d346a07802452d5b227df71d14f55e69fe7",
"body": "- Rewrite file-based tests to isolated in-memory databases\n- Each test syncs its own schema and seeds its own data\n- Untrack the committed sql/sqlite/test.db binary\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Make SQLite tests self-contained and untrack test.db",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-22T18:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9520f32883a1cf951ed4104a1fab1cad4f3cf30",
"body": "- Mark package and NewSupabase as experimental/incomplete\n- Log a warning on construction; most methods still panic\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Deprecate experimental Supabase engine",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-22T17:52:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea6cbc6ba965182f4287bf601700f351d5634ea1",
"body": "- Document that NoSQL writes are not rolled back with the SQL transaction\n- Add dberr.ErrNoSQLNotTransactional and warn on rollback when NoSQL is set\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Make UnitOfWork NoSQL non-transactional behavior explicit",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-22T17:52:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a76c06de3828ba23567917b2803724334ae22ade",
"body": "- Route \"prefix.column\" aliased columns into nested struct fields on scan\n- Extract shared setFieldValue helper for flat and nested assignment\n- Add example and README note for nested JOIN hydration\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add JOIN nested struct hydration",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-22T17:52:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "795574b7cbf7f526332a276e37cd4ec9a67635f8",
"body": "- Add verified example tests covering all SQL engine features\n- Add README examples table linking each feature to its example\n- Document bulk insert, lifecycle hooks, and full validation rule set\n- Fix stale README snippets (ctx signatures, Unit of Work API)\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add runnable feature examples and fix README drift",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-22T17:45:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b487e2efaad673784c13f97e578d1025288fc724",
"body": "- InsertMany now emits a single multi-row INSERT (both engines)\n- Add Before/After Create/Update/Delete and AfterFind hook interfaces\n- Add Validatable interface and len/oneof/gt/lt validation rules\n- Fix Restore to detect the soft-delete column\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add bulk insert, lifecycle hooks, and validation completion",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-22T17:44:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4af7714203257c4dc2ce5202a419770825295d1",
"body": "- json.RawMessage fields map to JSONB (Postgres) / TEXT (SQLite) automatically\n- New \"json\" db tag option stores any struct/map/slice as JSON\n- Marshal JSON fields on insert/update/filter, unmarshal on row scan\n- Plain []byte fields map to BYTEA / BLOB\n- Include failing query in addMissingColumns error\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add JSON column support",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-07-19T20:41:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8339c7cf7e08f9af424778fa7364d0c5a1b3707d",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Coerce SQLite bool columns when scanning rows",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-06-20T08:49:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "186bbb1290c8a41a0ee55b8e2ef2cfdebbd18213",
"body": "- Replaced direct string formatting with parameterized placeholders ($N for Postgres, ? for SQLite) in all query builder methods (In, Where, Having, Or, Like, etc.)\n- Introduced cached reflection in sql/reflect.go to optimize struct-to-table mapping and row scanning.\n- Refactored Statement builders to use pointer receivers for better state management.\n- Added integration tests for SQLite to verify end-to-end CRUD operations.\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Implement secure query builder and cached reflection for SQL engines",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T15:23:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4590d2c22aa65bb49048a7263b552ec649ff88d2",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add Unit of Work documentation with usage examples",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "313728a58ef8179797f0cfc5fe1c31fab80804e8",
"body": "…tions\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Replace deprecated DataNotFound with ErrNotFound in engine implementa…",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "400ed8eecbc04ff21e2cc1f75818a679b392bd2d",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Regenerate mocks to match current Engine interfaces",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c873ca94b5fa2759b1c687a0a622952843d0eae",
"body": "ValidationError.Error() was a value receiver so *ValidationError did\nnot implement error; errors.As(err, &ve) never matched wrapped values.\nChange Error() to pointer receiver and NewValidationError to return\n*ValidationError so errors.As works correctly.\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Fix IsValidationError always returning false for wrapped errors",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ee17b32d97e80c120f4c06286f007eadfdb0d07",
"body": "- SQLite: remove argCounter, use ? placeholders throughout (In, Where,\n Having, Or, Like, NotLike, Exists, NotExists, addJoin)\n- Both libs: GenerateInsertQuery and GenerateUpdateQuery now use\n parameterized placeholders (?/$N) and pass values via stmt.args\n instead of inlining via formatValues()\n\n[…]\naceholders\n to account for SET args that precede them in the driver args slice\n- Update tests to assert on ? placeholders and stmt.args contents\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Fix SQL injection in INSERT/UPDATE and SQLite placeholder dialect",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c7df9e6649f27ce8d1a776832452d7bf2a1db8c9",
"body": "- Use strings.Builder in GenerateReadQuery (sqlite and postgres libs)\n- Add GoDoc comments to all Engine interface methods\n- Fix redundant errors.Is check in dberr.IsNotFound\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Code quality, docs, and error cleanup",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0813e1187a35e97bd5c5f43c421f6b5d2704bb2f",
"body": "Add Join, LeftJoin, RightJoin, InnerJoin to Engine interface and implement\nin SQLite and Postgres engines via Statement.addJoin. pg-grpc and Supabase\nget panic stubs. GenerateReadQuery in both lib/statement.go files injects\nJOIN clauses between FROM and WHERE.\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "JOIN query builder support",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fc40468041c5c5734208525f56c3587d65f95a9",
"body": "SyncTable now parses idx, unique_idx, idx:name, and unique_idx:name\nstruct tags to create indexes automatically. Composite indexes share\na name across fields. DropTable method added to Engine interface for\ntable removal.\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add index creation from struct tags and DropTable support",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edaf2810a939ef16397d5c4273d19f62ce19564b",
"body": "New validation/ package supports validate struct tags with rules:\nrequired, min, max, email, url, numeric, alpha. Opt-in via\ndb.EnableValidation(true) — validates before InsertOne and UpdateOne,\nreturning dberr.ValidationError with per-field error details.\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add struct tag validation with opt-in EnableValidation hook",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1bfa6f07e6fb0557ad2f8b6d4850e99f7b4e36e",
"body": "Models with db:\"deleted_at,soft_delete\" tag get automatic soft delete\nbehavior: reads filter out deleted rows, DeleteOne sets deleted_at\ntimestamp instead of removing. WithDeleted() bypasses filter,\nForceDelete() does hard delete, Restore() clears deleted_at.\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add soft delete support via struct tag and auto-detection",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21799e8db6bf76afa69b62429302d81f042de2de",
"body": "New pagination/ package with Paginator metadata (Page, PerPage,\nTotalItems, TotalPages, HasNext, HasPrev). Paginate(page, perPage)\non Engine sets LIMIT/OFFSET for page-based queries.\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add pagination support with Paginate method and Paginator struct",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a45aa21a52fca9ffeacdf63851584016214c5d3",
"body": "… Having, Or, Like, Exists, and aggregates\n\nExtends Engine interface and Statement with full query-builder\nsupport. GenerateReadQuery now emits GROUP BY, HAVING, ORDER BY,\nLIMIT, OFFSET, and DISTINCT clauses. Aggregate functions (Count,\nSum, Avg, Min, Max) compose with column selection.\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add query builder methods: OrderBy, Limit, Offset, Distinct, GroupBy,…",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b656dc763999545a13fb311e4cba4f929cf7900c",
"body": "Statement struct has 13 fields; value receivers copied it on every\nchained method. Pointer receivers mutate in-place, reducing allocation\npressure on query-builder chains.\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Use pointer receivers on Statement to avoid copying per chain call",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d3140f2bf8c27d0b83d05eaf741c8d8cd1ad60d",
"body": "Single-connection model replaced with pooled *sql.DB across all SQL\nengines (SQLite, Postgres, gRPC server). Callers can now configure\npool size via SetMaxOpenConns/SetMaxIdleConns/SetConnMaxLifetime on\nthe returned *sql.DB before passing it to engine constructors.\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Switch from *sql.Conn to *sql.DB for connection pooling",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c608a222417dba87ecb101360a7ad1d549de44d7",
"body": "Add ctx as first param to every CRUD, transaction, and schema method on\nboth sql.Engine and nosql.Engine interfaces. Remove stored ctx fields\nfrom engine structs; callers now pass ctx per operation.\n\n- sql/sqlite, sql/postgres, sql/postgres/pg-grpc, sql/supabase,\n nosql/arangodb: ctx threaded throu\n[…]\nquickstart example\n- Add dberr/errors_test.go covering IsNotFound, IsDuplicate,\n IsValidationError, ValidationError.Error, sentinel distinctness\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Propagate context.Context through all Engine operations",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e56686a93eba86ac507eebf27728156a23db19d7",
"body": "- Add typed errors (ErrNotFound, ErrDuplicateEntry, ErrMissingWhereClause, etc.)\n- Add ValidationError type and helper functions (IsNotFound, IsDuplicate, IsValidationError)\n- Fix SQL injection in In() method using parameterized placeholders\n- Fix hardcoded RETURNING id assumption with ExtractPKColu\n[…]\n package to break import cycle\n- Update Supabase and pg-grpc stubs to satisfy Engine interface\n- Fix InsertMany duplicate id append bug in SQLite\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add typed errors and fix SQL injection vulnerability",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-17T14:59:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e90ed9108e543367ea11eb226d341579f2f50f85",
"body": "- Document all db struct tag options (pk, autoincr, uq, uqs, req)\n- Explain zero-value handling and override mechanisms\n- Document full Engine API (query building, CRUD, transactions, raw queries)\n- Add Unit of Work usage example\n- Add project structure overview\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Rewrite README with comprehensive documentation",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-14T16:01:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33e4cfacc52b3f37a0d43d8e48f20088d5ca7357",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Rename noskip struct tag to req",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-14T16:00:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ecd614dfc67624e5fb276fabea0b0710c253523",
"body": "…UPDATE\n\n- Parse \"noskip\" option in db struct tag (e.g. `db:\"col,noskip\"`)\n- Include noskip-tagged fields in WHERE clauses even when zero-valued\n- Include noskip-tagged fields in INSERT and UPDATE queries even when zero-valued\n- Apply to both SQLite and PostgreSQL implementations\n- Add unit tests for noskip behavior across all query types\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add noskip struct tag to always include fields in WHERE, INSERT, and …",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-14T15:43:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6cf9c462a68638d247b30273eef7df15a560816",
"body": "- Add MustFilterCols to Engine interface\n- Implement on SQLite and Postgres engines (delegate to Statement)\n- Add stub to Supabase (along with other missing stubs)\n- Add mock method for MustFilterCols\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Wire MustFilterCols through Engine interface and all implementations",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-14T15:41:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f411af87a291731899e0a95f3bcebcf9f6a2eb3",
"body": "- Add mustFilterCols/mustFilterColMap fields to Statement (sqlite + postgres)\n- Convert GenerateWhereClauseFromFilter from package function to Statement method\n- Respect MustFilterCols when building WHERE clauses from struct filters\n- Add unit tests for zero-value string and int filtering\n\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add MustFilterCols to Statement for zero-value WHERE clause filtering",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-04-14T15:40:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d321b7c1975d8112e03b1217f424c9890700b2f",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Fix InsertOne zero-value skip and UpdateOne/DeleteOne silent no-op",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2026-03-07T18:58:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3afb2ac61e57fb68afd1653e402761ee9d94527",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Set autoincrement true for postgres primary key constraint",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2025-12-20T19:19:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "746c8191c4fad1f2c921b7c26150bb16232eccaf",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Run `make fmt`",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2025-02-26T18:20:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca97fc11bd6015124654016fcc2716f3d811fe6b",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Update fmt.sh and Makefile",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2025-02-26T18:11:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40e46587701a77350a5180d2a27b9c3e3162d15b",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Set the inserted id value in sqlite implementation too",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2025-02-24T18:09:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a624b26568e193bfd116db066126f0efe37ca58b",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Assign the id back to the struct while Inserting data to db",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2025-02-23T18:55:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d403cfb206be60b88ea2e0dc157ec3df5148639",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Make Table method not required (#8)",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-04-04T06:49:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f04eceece796090072c233f716f47b4b023323d9",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Change ORM name to styx, also Database to Engine",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-04-04T06:49:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "702c1b2effe8c38992807fb89e6332e2b474e2f0",
"body": "Introduce transaction for postgres, sqlite database",
"is_bot": false,
"headline": "Merge pull request #6 from masudur-rahman/txn",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-04-03T20:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "248372ec6ecb53a2fb7d3809628386bc7b36ee47",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add UnitOfWork for all databases",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-04-03T20:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a8a9db756b4677124ff26d76e724b967238f361",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Introduce transaction for postgres, sqlite database",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-04-03T05:12:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7eace7d6f099bcac87aa1e64f4c39f0722c132d5",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add quickstart docs for the database ORM",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-03-29T19:08:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a15a9ce8f555000a0810c8414433623dbce20ea2",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add double quote around db name",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-03-02T16:21:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0259c9d5327af0164835ac5dfa93c74091594072",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Introduce Close() func to sql database interface",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-02-26T09:31:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2aff88153205e2ffbb59a131e33b7b82cdbe189",
"body": "Use modernc.org/sqlite (cgo free) instead of github.com/mattn/go-sqlite3",
"is_bot": false,
"headline": "Merge pull request #4 from masudur-rahman/cgo-0",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-02-26T06:46:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21661cdd5d19db80fc1dda5491202ffbefe405d9",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add ci",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-02-26T06:05:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e7e3954e32fa5f3c645089e638c7949287dc8b6",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Use modernc.org/sqlite (cgo free) instead of github.com/mattn/go-sqlite3",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-02-26T05:57:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9cd239e4075a568c6ee733731b2cca9dd06037f",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Changed Sqlite to SQLite",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-02-23T18:49:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b29ef80c966c164f87855a88699b4d1bf7c8b21",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Fix sqlite table info query format",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-02-09T17:43:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab358bc817d7cac871369686821481a070508aff",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Fix primary key issue for sqlite database",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-02-02T19:29:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d085498d302d246a47858bbaf9ba39aee7a4a93b",
"body": "* Add support for SQLite database\r\n\r\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>\r\n\r\n* Fix sqlite database synchronization\r\n\r\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>\r\n\r\n* Fix formatting\r\n\r\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add support for SQLite database (#3)",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2024-02-02T17:09:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3b5f6c5cd9b9a230804ee81e230a181711282ec",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add showsql method and fix where args",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-07-12T19:13:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6626544b1c25e677db85c252557c701cb5e67fc8",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add MustCols() method to sql.Database interface",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-07-09T19:29:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae20487bd96db121cfdb55f82dc6dad12f5864a7",
"body": "Add support for Postgres type database\r\n\r\nSigned-off-by: Masudur Rahman masudjuly02@gmail.com",
"is_bot": false,
"headline": "Merge pull request #2 from masudur-rahman/pg",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-07-03T18:17:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87fe50a44e240fe04521f3b5c194782c12119357",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Introduce statement field and its sub methods",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-07-03T18:12:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "265bfd767c6529e2b2192e1b93b2db364d1c4c57",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Log SQL if showSQL is set true",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-07-01T06:21:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fe8c020e0c13e377719555657417f93a0ffa499",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Fix ScanSingleRow function for custom typed string variable",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-25T20:39:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "934ae2c3dbc08ea1c5c8d1cdebf43bc89a611271",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Fix formatValues function for custom typed string value",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-25T16:52:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "680cae7f4d108f6eb67b9b36d15952ce446db8f5",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "fix generating field name from db tag issue",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-25T13:40:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "751fe0bb5ad29671ce90e0036d74e22aa8c0d41d",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Fix insert/update for pointer type data",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-25T11:51:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de43ba590003c85f87bce02df204911da0359cf3",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Use returning id as any after insertion in postgres",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-24T19:07:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3092f0f490d573f54c1635e9ad3a05f833437850",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add missing methods for supabase",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-24T18:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31da4f0c3188bd31891b86720f27b8ad0cf0caff",
"body": "Add Postgres ORM implementations",
"is_bot": false,
"headline": "Merge pull request #1 from masudur-rahman/pg",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-24T18:27:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa2949bc213b6caf1a58eb87cf82b7e569919bd6",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Refactor sync table method, and other codes",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-24T18:22:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8fd4abb52373abd80fb6dff33da6bf05d02357f",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Complete postgres db implementations",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-23T03:20:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80b9d5de3a48bb33677cef9aa67982c91659cdbd",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Fix FindOne, FindMany methods for postgres",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-21T03:10:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c551259ed78de0b0633576727127c283ed684ca",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Add support for cols, where statements in pgsql orm",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-15T03:18:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e841f887c20a8f2e672c2ffa115716ba8523f48c",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Move postgres grpc implementation to pg-grpc directory",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-05T03:08:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a42675b9fbf294fa29a86ec6b277deeb2f91158",
"body": "Signed-off-by: Masudur Rahman <masudjuly02@gmail.com>",
"is_bot": false,
"headline": "Copy database packages from Pawsitively Purrfect repo",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-03T20:15:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f60b010e0776d71538c4338f042e05b4ab64e91e",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Masudur Rahman",
"author_login": "masudur-rahman",
"committed_at": "2023-06-03T17:48:53Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 2,
"commits_last_year": 53,
"latest_release_at": "2026-07-25T11:51:42Z",
"latest_release_tag": "v2.0.0",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 6,
"days_since_latest_release": 2,
"mean_days_between_releases": 98.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/masudur-rahman/styx/v2",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/masudur-rahman/styx/v2",
"is_deprecated": false,
"latest_version": "v2.0.0",
"repository_url": "https://github.com/masudur-rahman/styx",
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-25T11:48:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 2
}
]
},
"popularity": {
"forks": 0,
"stars": 1,
"watchers": 1,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 30761,
"source_files_sampled": 76,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "google.golang.org/grpc",
"direct": true,
"version": "v1.55.0",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-hrxh-6v49-42gf",
"GHSA-m425-mq94-257g",
"GHSA-p77j-4mvh-x3m3",
"GO-2023-2153",
"GO-2026-4762"
],
"fixed_version": "1.82.1",
"advisory_count": 5,
"oldest_advisory_days": 1005
},
{
"name": "google.golang.org/protobuf",
"direct": true,
"version": "v1.30.0",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-8r3f-844c-mc37",
"GO-2024-2611"
],
"fixed_version": "1.33.0",
"advisory_count": 2,
"oldest_advisory_days": 873
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.8.0",
"severity": "high",
"ecosystem": "go",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-2wrh-6pvc-2jm9",
"GHSA-4374-p667-p6c8",
"GHSA-4v7x-pqxf-cx7m",
"GHSA-5cv4-jp36-h3mw",
"GHSA-qppj-fm5r-hxr3",
"GHSA-qxp5-gwg8-xv66",
"GHSA-vvgc-356p-c3xw",
"GO-2023-1988",
"GO-2023-2102",
"GO-2024-2687"
],
"fixed_version": "12.0.2",
"advisory_count": 23,
"oldest_advisory_days": 1090
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.16.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 65
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.8.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5970"
],
"fixed_version": "0.39.0",
"advisory_count": 1,
"oldest_advisory_days": 12
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 2,
"unknown": 2,
"critical": 1
},
"advisory_count": 32,
"affected_count": 5,
"assessed_count": 35,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 2
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/arangodb/go-driver",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/golang/mock",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/iancoleman/strcase",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.0"
},
{
"name": "github.com/lib/pq",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.9"
},
{
"name": "github.com/nedpals/supabase-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
},
{
"name": "github.com/rs/xid",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.4"
},
{
"name": "google.golang.org/grpc",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.55.0"
},
{
"name": "google.golang.org/protobuf",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.30.0"
},
{
"name": "modernc.org/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.29.2"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/arangodb/go-driver",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/golang/mock",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/iancoleman/strcase",
"direct": true,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/lib/pq",
"direct": true,
"version": "v1.10.9",
"ecosystem": "go"
},
{
"name": "github.com/nedpals/supabase-go",
"direct": true,
"version": "v0.3.0",
"ecosystem": "go"
},
{
"name": "github.com/rs/xid",
"direct": true,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.8.4",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": true,
"version": "v1.55.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": true,
"version": "v1.30.0",
"ecosystem": "go"
},
{
"name": "modernc.org/sqlite",
"direct": true,
"version": "v1.29.2",
"ecosystem": "go"
},
{
"name": "github.com/arangodb/go-velocypack",
"direct": false,
"version": "v0.0.0-20200318135517-5af53c29c67e",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/dustin/go-humanize",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/golang/protobuf",
"direct": false,
"version": "v1.5.3",
"ecosystem": "go"
},
{
"name": "github.com/google/go-querystring",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": false,
"version": "v1.3.0",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/golang-lru/v2",
"direct": false,
"version": "v2.0.7",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.16",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-sqlite3",
"direct": false,
"version": "v1.14.19",
"ecosystem": "go"
},
{
"name": "github.com/ncruces/go-strftime",
"direct": false,
"version": "v0.1.9",
"ecosystem": "go"
},
{
"name": "github.com/nedpals/postgrest-go",
"direct": false,
"version": "v0.1.3",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/remyoudompheng/bigfft",
"direct": false,
"version": "v0.0.0-20230129092748-24d4a6f8daec",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": false,
"version": "v0.8.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.16.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.8.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto",
"direct": false,
"version": "v0.0.0-20230306155012-7f2fa6fef1f4",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
},
{
"name": "modernc.org/gc/v3",
"direct": false,
"version": "v3.0.0-20240107210532-573471604cb6",
"ecosystem": "go"
},
{
"name": "modernc.org/libc",
"direct": false,
"version": "v1.41.0",
"ecosystem": "go"
},
{
"name": "modernc.org/mathutil",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "modernc.org/memory",
"direct": false,
"version": "v1.7.2",
"ecosystem": "go"
},
{
"name": "modernc.org/strutil",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "modernc.org/token",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 35,
"direct_count": 10,
"indirect_count": 25
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 10,
"open_issues": 1,
"closed_ratio": 0.5,
"closed_issues": 1,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "masudur-rahman",
"commits": 91,
"avatar_url": "https://avatars.githubusercontent.com/u/13915755?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/6 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "29 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 4,
"reason": "dependency not pinned by hash detected -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "23 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "8d081539cc663d633397656c8cb891899e1f6f7e",
"ran_at": "2026-07-27T15:54:24Z",
"aggregate_score": 3.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T11:48:45Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-25T11:48:18Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 5,
"created_at": "2024-04-01T17:18:52Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/masudur-rahman/styx",
"host": "github.com",
"name": "styx",
"owner": "masudur-rahman"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"security": 38,
"vitality": 76,
"community": 24,
"governance": 51,
"engineering": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 76,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"commits_last_year": 53,
"human_commit_share": 1,
"days_since_last_push": 2,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "53 commits in the last year",
"points": 15.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 53
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "29 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 2,
"latest_release_tag": "v2.0.0",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 98.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~98.9 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 98.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 1,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "1 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 1
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 51,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"merged_prs": 10,
"open_issues": 1,
"closed_issues": 1,
"issue_closed_ratio": 0.5,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "50% of issues closed",
"points": 23.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 50
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "10/10 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 10,
"decided": 10
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/6 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"followers": 81,
"owner_type": "User",
"is_verified": null,
"owner_login": "masudur-rahman",
"public_repos": 69,
"account_age_days": 3992
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "81 followers of masudur-rahman",
"points": 13.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 81,
"login": "masudur-rahman"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "69 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 69
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"packages": [
"github.com/masudur-rahman/styx/v2"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 2
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 2 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 2
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "1 published versions",
"points": 4,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 1
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"arangodb",
"go",
"golang",
"orm",
"postgres",
"postgresql",
"sqlite",
"go-orm",
"golang-orm"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "9 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 9
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 38,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 35,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/6 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "29 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 4",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "23 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "at_risk",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 35 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 35
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 48,
"inputs": {
"source": "osv",
"advisories": 32,
"affected_packages": 5,
"assessed_packages": 35,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, high 2, unknown 2",
"direct_affected_packages": 2
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "2 affected: google.golang.org/grpc v1.55.0 (critical 9.1), google.golang.org/protobuf v1.30.0 (high 7.5)",
"points": 8,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 2,
"packages": "google.golang.org/grpc v1.55.0 (critical 9.1), google.golang.org/protobuf v1.30.0 (high 7.5)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "2 advisory-carrying package(s) unaddressed past 90 days; oldest published 1005 days ago",
"points": 28.3,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 2,
"oldest": 1005
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 35,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 56,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.571,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "52 of 91 human commits state their intent (structured subject or explanatory body)",
"points": 30.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 52,
"sampled": 91
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 91",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 91
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 4",
"points": 4,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 30761,
"source_files_sampled": 76,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/76 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 76,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T15:54:38.179394Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/masudur-rahman/styx.svg",
"full_name": "masudur-rahman/styx",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.