moby/spdystream holds a health index of 56 out of 100, placing it in the Moderate band. It scores highest on Sustainability & Governance (69/100) and lowest on Vitality (41/100). It was last updated 108 days ago. A single contributor accounts for most of its recent work.
56
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
56
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 54 is calibrated to 56 on the published index scale (record calibration 2026-08-02).
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Manageable file sizes — 0/15 source files over 60KB
Inputs used
primary_language
Go
largest_source_bytes
29,149
source_files_sampled
15
oversized_source_files
0
Key facts
149GitHub stars
17contributors
20commits, last 12 months
108days since last push
6releases
1bus factor
10open issues
Gopackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 60 ⇿
0Stars
60Forks
6Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 5Patch 1
Each point covers 11 days.
OpenSSF Scorecard 4.9 / 10
4.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-30 22:54 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 209,
"has_wiki": false,
"homepage": null,
"languages": {
"Go": 132212,
"Shell": 902
},
"pushed_at": "2026-04-13T17:46:34Z",
"created_at": "2014-06-05T22:44:33Z",
"owner_type": "Organization",
"updated_at": "2026-07-14T10:15:03Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://mobyproject.org/",
"name": "Moby",
"type": "Organization",
"login": "moby",
"company": null,
"location": null,
"followers": 1310,
"avatar_url": "https://avatars.githubusercontent.com/u/27259197?v=4",
"created_at": "2017-04-11T02:31:37Z",
"is_verified": null,
"public_repos": 33,
"account_age_days": 3397
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-04-16T10:38:19Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2024-07-24T22:05:49Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2024-06-27T16:58:46Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2024-06-25T20:00:52Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2021-01-28T14:11:08Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2021-01-27T21:22:02Z"
}
],
"recent_commits": [
{
"oid": "c59e5d73daa301bde452ea77545bdf51e32554a2",
"body": "use ioutil.Discard for go1.13 compatibility",
"is_bot": false,
"headline": "Merge pull request #109 from thaJeztah/use_ioutil",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-13T17:36:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fd0155e904f1f9b834b8460e8fdb8522bb59f84",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "use ioutil.Discard for go1.13 compatibility",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-04-13T17:29:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef6121f62c730110bf5ae604a865a8613bfb787f",
"body": "uint32",
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-04-13T17:23:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "241cec95b8f02919845dc4758f1f5310fc886739",
"body": "Signed-off-by: Samuel Karp <samuelkarp@google.com>",
"is_bot": false,
"headline": "compare with signed Int for 32-bit Arm",
"author_name": "Samuel Karp",
"author_login": "samuelkarp",
"committed_at": "2026-04-13T17:00:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21c38640c8c8f43173b17e5bc6690a5fa25d6935",
"body": "Guard against oversized SPDY frames\n\nSigned-off-by: Davanum Srinivas <davanum@gmail.com>\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "Add options to customize limits",
"author_name": "Davanum Srinivas",
"author_login": "dims",
"committed_at": "2026-03-29T10:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acf9b456d06816c5cf23bf3892e13441f947d5fd",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "spdy: update godoc for MaxDataLength",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-29T10:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb6360582bf1343f485ca87b76efc9e72b49d690",
"body": "Signed-off-by: Davanum Srinivas <davanum@gmail.com>\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "spdy: limit header-size and header-count",
"author_name": "Davanum Srinivas",
"author_login": "dims",
"committed_at": "2026-03-29T10:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f21da42eaab90f03a82fb03d0de8e91eb1d0fc6",
"body": "writeHeaderValueBlock accounts for serialized 32-bit length/count fields\nas 2 bytes, but they occupy 4 bytes on the wire.\n\nAdjust the returned byte count to match the encoded header block layout.\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "spdy: fix header block byte accounting",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-29T10:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5976b6612f07a27f2e9a4de875485defb43b5d50",
"body": "SPDY control and data frame headers carry a 24-bit Length field, so\nframe payloads must be limited to 2^24-1 bytes.\n\nTighten the write-side bounds checks accordingly. SETTINGS still encodes\nits entry count as a 32-bit field, but the total payload must fit within\nthe 24-bit frame length.\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "spdy: enforce 24-bit frame length limits",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-29T10:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf0ec5d0fe4dbb2f3525f733946e0d0ddbfd5b13",
"body": "Signed-off-by: Davanum Srinivas <davanum@gmail.com>\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "Guard against oversized SPDY frames",
"author_name": "Davanum Srinivas",
"author_login": "dims",
"committed_at": "2026-03-29T10:10:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0be51f30e2e861eaa06b3374fd0f3c2512038bc",
"body": "ci: update actions and test against latest Go versions",
"is_bot": false,
"headline": "Merge pull request #107 from thaJeztah/update_actions",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-16T07:44:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "206d7554c2c2b78d152cbd4a681910950e1adfa1",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "ci: test with -race",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-15T18:58:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5a3b656ababb767ef1785b8aa875d174974df7c",
"body": "Test the oldest version supported by the module, and currently\nsupported versions.\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "ci: test on go1.13.x, oldstable, stable",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-15T18:58:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5a31fab24a670730c7797448114264b2b0d6b92",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "ci: update to actions/setup-go@v6, actions/checkout@v6",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-15T18:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e060b910adb26bc660975da3d0233f96c3c40c43",
"body": "- set default permissions to 'content: read'\n- limit concurrency\n- set GOTOOLCHAIN: local to make sure the expected version of\n Go is used (prevent implicit upgrading)\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "ci: update workflow config",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-15T18:57:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eae6b3baf0c1d1c02ae15c200b24f592c08b9733",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "ci: gha: format ci.yaml",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-15T18:57:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f72e20417ac3a81b74b4243917248f911fa4523",
"body": "spdy: fix duplicate license headers, add LICENSE, PATENTS, and update NOTICE",
"is_bot": false,
"headline": "Merge pull request #106 from thaJeztah/fix_license_headers",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-15T18:32:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4160b6e2f57ac21f83a1de42e76e7f0e05f071de",
"body": "Code in the spdy directory was derived from the Go project (golang.org/x/net)\nin commmit 866205ebbbb945b17b8e6d284f357d24efc353f4, because the code was removed\nin upstream in https://github.com/golang/net/commit/ff8eb9a34a5cbb9941ffc6f84a19a8014c2646ad\n\nThis patch:\n\n- Adds the correct license and patents files to the directory.\n- Adds a mention to the NOTICE file at the root of the repository.\n\nCo-authored-by: Bob Badour <bbadour@google.com>\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "update NOTICE, add LICENSE and PATENTS in spdy directory",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-15T16:24:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "750faf4e81b62f7cb7217bd3179b8347cf631a5d",
"body": "The Apache 2 headers were added in 0c4d6b80cad8e5427ed1a921ce7ae22e1b9a1ca7,\nwhich overlooked that these files were forked from the Go project, and\nBSD licensed.\n\n- Remove the Apache 2 headers\n- Update the validate script to ignore the spdy directory\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "spdy: fix duplicate license headers",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-15T16:16:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c961141ac56d6bd8521785c46239630214e1f33",
"body": "The repository was moved to the containerd org; also fix some minor\nissues in the script to make it valid for POSIX shell.\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "update ltag module name",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2026-03-15T16:15:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77eb080123d208697674a07b74ceaf94c98bee8b",
"body": "Avoid leaking goroutines on close",
"is_bot": false,
"headline": "Merge pull request #101 from liggitt/close-leak",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2024-07-23T13:25:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93aa56f36894624a8e9b2316b0ad1dd192b08873",
"body": "gha: update actions and go versions",
"is_bot": false,
"headline": "Merge pull request #102 from thaJeztah/refresh_gha",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2024-06-28T21:08:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0aeabbd34ed1788f4a9f87d94d8498d332e6918a",
"body": "Keeping the oldest version in the matrix, as that's defined\nas minimum in go.mod, but testing against latest and previous.\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "gha: test against go1.13 (oldest), go1.21 and go1.22",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2024-06-28T19:40:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe02cdde8a2ffbdaccc4fc935d1a4fe8672f55dd",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "gha: update to actions/setup-go@v5",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2024-06-28T19:39:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9734312380af1560c1d9bb32744ce7e11d1e511",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "gha: update to actions/checkout@v4",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2024-06-28T19:38:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f1023d13c03a01e0adc50f94b5d693232ca9aba",
"body": "Signed-off-by: Jordan Liggitt <liggitt@google.com>",
"is_bot": false,
"headline": "Shorten timeout for unhandled error to 1 second",
"author_name": "Jordan Liggitt",
"author_login": "liggitt",
"committed_at": "2024-06-28T16:54:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad82e28ba118160c0a577e35c21774726b182b6b",
"body": "Signed-off-by: Jordan Liggitt <liggitt@google.com>",
"is_bot": false,
"headline": "Avoid leaking timeout timer channels",
"author_name": "Jordan Liggitt",
"author_login": "liggitt",
"committed_at": "2024-06-28T16:53:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ebd9df2e5a721bdde7dd655c21019f778a8ab94",
"body": "remove empty go.sum",
"is_bot": false,
"headline": "Merge pull request #100 from thaJeztah/remove_gosum",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2024-06-28T15:29:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb11f46b31f3555df3b06de0bfef3ae37b7b4e42",
"body": "This module no longer has any dependencies, hence won't produce a go.sum.\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "remove empty go.sum",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2024-06-27T17:26:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "258380da5f17ec2c26272bcb91a61d592fcb0105",
"body": "Remove unused websocket package",
"is_bot": false,
"headline": "Merge pull request #98 from dmcgowan/remove-ws-package",
"author_name": "Davanum Srinivas",
"author_login": "dims",
"committed_at": "2024-06-27T16:56:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3b79af431483fcce42300f437f02367171a9566",
"body": "Avoid 10 minute goroutine leak in error case for handled errors",
"is_bot": false,
"headline": "Merge pull request #99 from liggitt/closeleak",
"author_name": "Davanum Srinivas",
"author_login": "dims",
"committed_at": "2024-06-27T16:55:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c84296d30b3e6501bd9560c95667184e2cbaa78",
"body": "Signed-off-by: Jordan Liggitt <liggitt@google.com>",
"is_bot": false,
"headline": "Avoid 10 minute goroutine leak in error case for handled errors",
"author_name": "Jordan Liggitt",
"author_login": "liggitt",
"committed_at": "2024-06-27T16:22:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42b2632104e61758a01742442434f919e10fcb16",
"body": "Signed-off-by: Derek McGowan <derek@mcg.dev>",
"is_bot": false,
"headline": "Remove unused websocket package",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2024-06-25T23:22:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c1fc43b0e4a133966cb8b6be96d302fceefd94b",
"body": "Fixed data race in Stream.IsFInished()",
"is_bot": false,
"headline": "Merge pull request #96 from code-qote/fix-stream-is-finished-data-race",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2024-06-21T17:41:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "478d001c372d41e3f37913de8df19f4290cedc07",
"body": "Fix unit test races (carry #48)",
"is_bot": false,
"headline": "Merge pull request #89 from thaJeztah/carry_48_fix_unit_test_race",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2024-06-21T15:46:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31503b121d5ad7971e88a40ebd662c32c0ce01f6",
"body": "Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "Fix unit test races",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2024-06-21T13:35:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06348fb9ca3dd6f9c0a2192be2b501baf4c92de2",
"body": "Fix Ping data-race",
"is_bot": false,
"headline": "Merge pull request #91 from tigrato/fix-ping-data-race",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2024-06-21T13:25:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cf8949a00131b9af88e80d61f8baecb3fb4f7d2",
"body": "Signed-off-by: niqote <niqote@yandex-team.ru>",
"is_bot": false,
"headline": "fixed data race",
"author_name": "niqote",
"author_login": null,
"committed_at": "2024-01-16T12:05:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3473c0b0cd1433c2a0153d57f461f533cd1cd1e6",
"body": "While testing some code under `-race` flag, the race detector flagged a\ndata race on `spdystream.Ping` code path.\n\n```\n==================\nWARNING: DATA RACE\nRead at 0x00c012a966a8 by goroutine 483923:\n github.com/moby/spdystream.(*Connection).handlePingFrame()\n /go/pkg/mod/github.com/moby/spdy\n[…]\n/mod/k8s.io/client-go@v0.26.3/tools/remotecommand/remotecommand.go:157 +0xbc\n==================\n```\n\nThis PR aims to fix the present data race.\n\nSigned-off-by: Tiago Silva <tiago.silva@goteleport.com>",
"is_bot": false,
"headline": "Fix Ping data-race",
"author_name": "Tiago Silva",
"author_login": "tigrato",
"committed_at": "2023-05-06T14:13:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57d1ca2bd6b9a33c1ac755d5f8033d0abdca3324",
"body": "gha: update go versions",
"is_bot": false,
"headline": "Merge pull request #90 from thaJeztah/update_go_versions",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2022-12-19T12:36:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e995746a3e04a0bc5ac2564a7591abd6b44bcc2",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "gha: update go versions",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2022-12-19T08:55:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbc715126c0e3fa07721879c6d265b2b82c71e5b",
"body": null,
"is_bot": false,
"headline": "Merge pull request #84 from dims/switch-name-from-docker-to-moby",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2021-01-28T04:18:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf11281a1d4cff77bbdf20e6dc741860f6aab513",
"body": "Signed-off-by: Davanum Srinivas <davanum@gmail.com>",
"is_bot": false,
"headline": "Switch from docker->moby for spdystream",
"author_name": "Davanum Srinivas",
"author_login": "dims",
"committed_at": "2021-01-27T21:32:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18f9c867b9a958e49ea0ed67887f10c67d209341",
"body": "Add new maintainers, and update Derek's e-mail address",
"is_bot": false,
"headline": "Merge pull request #83 from thaJeztah/update_maintainers",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-26T11:48:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f4b540896664348d39b78b853a4d0e391ea37b2",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "Add new maintainers, and update Derek's e-mail address",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T18:54:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3772984b6ba6f368dfb15225a0aa40010afd4f71",
"body": "Add validate step to GH actions",
"is_bot": false,
"headline": "Merge pull request #82 from thaJeztah/gh_check",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T16:09:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53d07ec688068754c3b153f607b09c51ef9a0806",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "Add validate step to GH actions",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T15:12:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3372efb2175c2b286228528b1262fab06ae5d60",
"body": "Remove separate \"docs\" license, add NOTICE, and add license headers",
"is_bot": false,
"headline": "Merge pull request #81 from thaJeztah/cleanup_license",
"author_name": "Justin Cormack",
"author_login": "justincormack",
"committed_at": "2021-01-25T13:36:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c4d6b80cad8e5427ed1a921ce7ae22e1b9a1ca7",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "Add license headers and validate script",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T12:55:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "849d98e6f95692063672186c0227be93976e4bc8",
"body": "The license itself should be included ad-verbatim, and the part that\nwas modified is only a template/example to use when licensing files.\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "Add notice, and revert modifications in license",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T12:40:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf52924813e8066a325273566fa443f4435e780c",
"body": "This reverts commit db3bc0607e214bffe468f5a9defcbea54ac00bc0.\n\nThere's no real documentation in this repository, other than a README,\nso let's remove the separate license for \"docs\" to simplify things\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "Revert \"Update license and add docs license\"",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T12:25:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73be255fb1310323bc222723be0bd3e8ae624c12",
"body": "Add GitHub Actions CI to run unit tests",
"is_bot": false,
"headline": "Merge pull request #80 from chris-crone/ci",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T12:25:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "579d4c6b09d4388ccee8d751a6c7c190e6210056",
"body": "Signed-off-by: Chris Crone <christopher.crone@docker.com>",
"is_bot": false,
"headline": "ci: Add GitHub Actions CI to run unit tests",
"author_name": "Chris Crone",
"author_login": "chris-crone",
"committed_at": "2021-01-25T12:14:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "359346a4b2f4a56d573a6a012098f4774eccad5a",
"body": "add go.mod",
"is_bot": false,
"headline": "Merge pull request #79 from thaJeztah/go_mod",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T12:13:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6963db952e61ec7d1fbaa07dc4777cf273a0ecb5",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "add go.mod",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T09:49:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b93479d409f2534d723731ebd906e62a61ebd6c6",
"body": "Fix various linting issues",
"is_bot": false,
"headline": "Merge pull request #77 from thaJeztah/linting_fixes",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T09:47:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c42d68e78c2b473d33264ace48cbc25ceb309b77",
"body": "fix close bug",
"is_bot": false,
"headline": "Merge pull request #78 from zhipengzuo/master",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-25T09:32:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d9fc660edd8230d3ea261cda2759b994bb3f455",
"body": "Signed-off-by: 勇里 <yongli.zzp@antgroup.com>",
"is_bot": false,
"headline": "fix close bug",
"author_name": "勇里",
"author_login": null,
"committed_at": "2021-01-14T13:49:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8578a9f143597427c6b68f7205f326d3739ed67",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "spdy/types.go: fix consts having mixed type",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-14T12:39:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34cf509ac70bb443644a1ce6adad06de1fea4048",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "fix some linting issues",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2021-01-14T12:28:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1e3d0f37da8a0cf3cfc5efd154ae3efd9ef27a4",
"body": "Signed-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "gofmt code",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2020-03-12T23:15:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6480d4af844c189cf5dd913db24ddd339d3a4f85",
"body": "bugfix: make test case right",
"is_bot": false,
"headline": "Merge pull request #73 from fuweid/fix_issue72",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2018-10-23T17:14:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aef7e4d3b91cd2ae97dde4e2260c828465a9573b",
"body": "1. fix format issue for go1.10\n2. update the github.com/docker/spdystream/... package test case\n\nSigned-off-by: Wei Fu <fuweid89@gmail.com>",
"is_bot": false,
"headline": "bugfix: make test case right",
"author_name": "Wei Fu",
"author_login": "fuweid",
"committed_at": "2018-10-22T12:23:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc6354cbbc295e925e4c611ffe90c1f287ee54db",
"body": "correct spelling mistake",
"is_bot": false,
"headline": "Merge pull request #69 from EdwardBetts/spelling",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2017-09-12T18:36:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c0948daa13a5dff5301158e1b43aad81cdd2019",
"body": "Signed-off-by: Edward Betts <edward@4angle.com>",
"is_bot": false,
"headline": "correct spelling mistake",
"author_name": "Edward Betts",
"author_login": "EdwardBetts",
"committed_at": "2017-09-12T06:33:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed496381df8283605c435b86d4fdd6f4f20b8c6e",
"body": "Replace noop Errorf calls with Printf calls",
"is_bot": false,
"headline": "Merge pull request #67 from whyrusleeping/master",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2016-09-12T21:06:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08fdce8aa1fa4d3ef921a18e859d779735dfedc7",
"body": null,
"is_bot": false,
"headline": "use debugMessage instead of log.Printf",
"author_name": "Jeromy",
"author_login": "whyrusleeping",
"committed_at": "2016-09-12T20:54:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "857eb6fd96fc5edfa62c59e4ecd34770051980e3",
"body": "…direct",
"is_bot": false,
"headline": "move fmt.Printf statements to log to make it easier to silence and re…",
"author_name": "Jeromy",
"author_login": "whyrusleeping",
"committed_at": "2016-09-12T04:53:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da5d8c90990cdfdad6a8e278b8bb63e6cb3668a9",
"body": null,
"is_bot": false,
"headline": "Assign priority from SynStreamFrame to the created stream",
"author_name": "Jeromy",
"author_login": "whyrusleeping",
"committed_at": "2016-09-12T04:53:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "896a32f10aa08d7595ddaae62e75c90b30e06b25",
"body": null,
"is_bot": false,
"headline": "Replace noop Errorf calls with Printf calls",
"author_name": "Jeromy",
"author_login": "whyrusleeping",
"committed_at": "2016-09-12T04:32:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "449fdfce4d962303d702fec724ef0ad181c92528",
"body": "…-reset\n\nMake sure stream.Read() unblocks for close + reset",
"is_bot": false,
"headline": "Merge pull request #66 from ncdc/unblock-stream-read-after-close-then…",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2016-03-10T17:48:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49d50462d4a9e4eb37c55ccf3cc8c756ccc5cc86",
"body": "Make sure that stream.Read() always unblocks after a stream.Close() followed by a stream.Reset().\nEven if the stream is considered finished (which happens when you call stream.Close()), we need to\nstill call stream.closeRemoteChannels() when stream.Reset() is called, regardless of the value of\nstream.finished. This ensures that stream.closeChan is closed, which unblocks readers.",
"is_bot": false,
"headline": "Make sure stream.Read() unblocks for close + reset",
"author_name": "Andy Goldstein",
"author_login": null,
"committed_at": "2016-03-10T17:36:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "106e140db2cb50923efe088bf2906b2ee5a45fec",
"body": "Add missing label to break out of Serve loop",
"is_bot": false,
"headline": "Merge pull request #65 from ncdc/missing-break-loop-label",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2016-01-29T22:27:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c598685ba2c3072b59f1aa5198e8725b0d16f53",
"body": null,
"is_bot": false,
"headline": "Add missing label to break out of Serve loop",
"author_name": "Andy Goldstein",
"author_login": null,
"committed_at": "2016-01-29T20:28:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c33989bcb56748d2473194d11f8ac3fc563688eb",
"body": "Remove close of datachan",
"is_bot": false,
"headline": "Merge pull request #61 from dmcgowan/fix-close-channel-send-60",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2016-01-20T18:47:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f7ac77a7423eeb67ac3a04ad079c16d5bfc77a8",
"body": "Eliminate possible SetIdleTimeout deadlock",
"is_bot": false,
"headline": "Merge pull request #64 from ncdc/fix-set-idle-timeout-hang",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2016-01-20T17:07:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "075f57ce2efeea19f3190e6722bf8aa878e18ac5",
"body": "- Make setTimeoutChan buffered\n- Ensure that attempting to call SetIdleTimeout after the idleAwareFramer's monitor function has\n stopped is a no-op instead of a deadlock",
"is_bot": false,
"headline": "Eliminate possible SetIdleTimeout deadlock",
"author_name": "Andy Goldstein",
"author_login": null,
"committed_at": "2016-01-04T19:12:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8bec79d60d579b80272e840496241d6d8481ce5",
"body": "update maintainers file for parsing",
"is_bot": false,
"headline": "Merge pull request #62 from thaJeztah/update-maintainers",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-12-05T01:02:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6882ac26495bd834e70b99027a18e033f215f2fc",
"body": "this updates the MAINTAINERS file to the new format,\nso that it can be parsed and collected in the docker/opensource\nrepository.\n\nSigned-off-by: Sebastiaan van Stijn <github@gone.nl>",
"is_bot": false,
"headline": "update maintainers file for parsing",
"author_name": "Sebastiaan van Stijn",
"author_login": "thaJeztah",
"committed_at": "2015-12-05T00:16:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "593dba59b89db4589902602c58e2eb95c22bbe43",
"body": "Closing of the dataChan right after the closeChan can cause a race in select statements.\nIf select attemps the dataChan operation then a panic will happen.\nSince dataChan is not used for synchronization, the closure of closeChan is enough to stop all data operations.\n\nFixes #60\n\nSigned-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)",
"is_bot": false,
"headline": "Remove close of datachan",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-12-04T23:15:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dd82317e9f966446d18f73eef89d4ade0690837",
"body": "Update license and add docs license",
"is_bot": false,
"headline": "Merge pull request #59 from dmcgowan/license-update",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-11-06T02:11:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db3bc0607e214bffe468f5a9defcbea54ac00bc0",
"body": "Clarify license information in readme\n\nSigned-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)",
"is_bot": false,
"headline": "Update license and add docs license",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-11-06T02:08:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d80814cacc64cd8a357cf88b2247a117486cb8f",
"body": "Remove unused docs license from README",
"is_bot": false,
"headline": "Merge pull request #58 from dmcgowan/remove-cc-license",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-11-02T20:19:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed0680c79b3d9bcd1881c0d5e87e350aade6140b",
"body": "fixes #57\n\nSigned-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)",
"is_bot": false,
"headline": "Remove unused docs license from README",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-11-02T20:18:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43bffc458d55aa784be658c9867fbefcfcb7fecf",
"body": "Fix possible data loss after goaway received",
"is_bot": false,
"headline": "Merge pull request #56 from ncdc/fix-goaway-race",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-10-21T15:48:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53c35080f520c09cd3bc2fd32fd5d347ced2fdb0",
"body": null,
"is_bot": false,
"headline": "Add test case",
"author_name": "Andy Goldstein",
"author_login": null,
"committed_at": "2015-10-19T11:49:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13aaade95d45b602ecf90b8b40d205f274b90b8d",
"body": null,
"is_bot": false,
"headline": "Handle go away frame after queues are drained",
"author_name": "Andy Goldstein",
"author_login": null,
"committed_at": "2015-09-03T14:26:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc558d37a6221ff9f53d3f75d8d783f48648bbf5",
"body": "All frames are processed by workers running in goroutines. If 1 worker's\nqueue is backed up with data frames and another worker receives and\nprocesses a goaway frame, it's a race as to whether or not the workers\nwill be able to process the pending data frames before the streams are\nremoved from the \n[…]\ntreams map.\n\nThis fix processes the goaway frame synchronously in Serve() instead of\nin a worker goroutine. We now wait for all the workers to drain their\nframe queues before tearing down the streams.",
"is_bot": false,
"headline": "Fix possible data loss after goaway received",
"author_name": "Andy Goldstein",
"author_login": null,
"committed_at": "2015-09-02T18:03:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b2c3287865f3ad6aa22821ddb7b4692b896ac207",
"body": "synchronize stream creation",
"is_bot": false,
"headline": "Merge pull request #54 from jbenet/sync-stream-creation",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-06-15T16:27:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8ff317f21a2515b7f58514a4b2c1152867a8f72",
"body": "SPDY implementations MUST synchronize stream creation (all the way\nto writing the frame) as stream IDs **MUST** increase monotonically.\nThere was already synchronization on ID creation, but if CreateStream\nwas called from different goroutines, the calls could interleave\nbefore writing the actual fra\n[…]\nre letting the next stream grab the ID and write the frame.\nThere are probably better ways of doing this, but this minimizes\nchanges.\n\nLicense: Apache 2\nSigned-off-by: Juan Batiz-Benet <juan@benet.ai>",
"is_bot": false,
"headline": "synchronize stream creation",
"author_name": "Juan Batiz-Benet",
"author_login": "jbenet",
"committed_at": "2015-06-15T07:55:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e372247595b2edd26f6d022288e97eed793d70a2",
"body": "Fork spdy definition into spdystream",
"is_bot": false,
"headline": "Merge pull request #53 from dmcgowan/fork-spdy-definition",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-04-28T23:51:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "866205ebbbb945b17b8e6d284f357d24efc353f4",
"body": "The upstream spdy definition package was deprecated. That package is now moved into spdystream.\n\ncloses #52\n\nSigned-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)",
"is_bot": false,
"headline": "Fork spdy definition into spdystream",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-04-27T22:04:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83ae67e694a4ab5cbaee4d3126f25118712b26e6",
"body": "Use github spdy repository",
"is_bot": false,
"headline": "Merge pull request #51 from kargakis/replace-imports",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-04-11T18:06:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a45e468a2075ad04439869c6d8b62485d311e15",
"body": null,
"is_bot": false,
"headline": "Use github spdy repository",
"author_name": "kargakis",
"author_login": "Kargakis",
"committed_at": "2015-04-11T08:08:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99515db39d3dad9607e0293f18152f3d59da76dc",
"body": "Fix write/close deadlock",
"is_bot": false,
"headline": "Merge pull request #50 from ncdc/fix-write-close-deadlock",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-04-09T16:14:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d91d6d1559160c1265435f0b830bddc6aaaba66e",
"body": "When the monitor goroutine sees that the connection has closed, it is\nsometimes possible for resetChan to be full and a Write() invocation\nblocked sending to resetChan. If this happens, and monitor attempts to\ngrab the write lock, it will result in a deadlock because Write() has\nthe lock, monitor is\n[…]\ne the lock, and nothing is draining\nresetChan.\n\nStart a goroutine in monitor to drain resetChan, just before trying to\nacquire the lock.\n\nFixes #49\n\nSigned-off-by: Andy Goldstein <agoldste@redhat.com>",
"is_bot": false,
"headline": "Fix write/close deadlock",
"author_name": "Andy Goldstein",
"author_login": null,
"committed_at": "2015-04-09T15:55:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e731c8f9f19ffd7e51a469a2de1580c1dfbb4fae",
"body": "Don't try to read/write if connection is closed",
"is_bot": false,
"headline": "Merge pull request #46 from ncdc/conn-close-deadlock",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-03-09T19:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63b695fa1c668ddf8c2cb08d9feaeccb53a6b229",
"body": "Reset logic currently allows for writing to the reset chan after monitor has exited. Once monitor has detected a close, no more frames should be written.\n\nSigned-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)",
"is_bot": false,
"headline": "Move write lock to framer and fix reset",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-03-09T19:46:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b069eaccc9c6f6e3d96f5fe61af56c8a610eb938",
"body": "There appears to be an issue on OS X where the following sequence of\nevents occurs, leading to a deadlock:\n\n1. Remote side closes its connection\n2. Local side receives io.EOF trying to read the next frame\n3. Local idleAwareFramer monitor goroutine exits, so nothing is\nreceiving from resetChan any mo\n[…]\ne underlying framer.\n\nAlso remove some timeouts in the test code - these should be handled by\npassing -test.timeout to the test executable instead.\n\nSigned-off-by: Andy Goldstein <agoldste@redhat.com>",
"is_bot": false,
"headline": "Don't try to read/write if connection is closed",
"author_name": "Andy Goldstein",
"author_login": null,
"committed_at": "2015-03-09T19:45:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e9bf9912b85eec0ed6aaf317808a0eab25e3ca43",
"body": "Fix race in idle expiration",
"is_bot": false,
"headline": "Merge pull request #47 from dmcgowan/fix-expiration-race",
"author_name": "Derek McGowan",
"author_login": "dmcgowan",
"committed_at": "2015-03-02T16:50:12Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 6,
"commits_last_year": 20,
"latest_release_at": "2026-04-16T10:38:19Z",
"latest_release_tag": "v0.5.1",
"releases_from_tags": false,
"days_since_last_push": 108,
"active_weeks_last_year": 4,
"days_since_latest_release": 105,
"mean_days_between_releases": 380.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": true,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/moby/spdystream",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/moby/spdystream",
"is_deprecated": false,
"latest_version": "v0.5.1",
"repository_url": "https://github.com/moby/spdystream",
"versions_count": 6,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-04-13T17:36:51Z",
"latest_version_yanked": null,
"days_since_latest_publish": 108
}
]
},
"popularity": {
"forks": 60,
"stars": 149,
"watchers": 39,
"fork_history": {
"days": [
{
"date": "2014-06-12",
"count": 2
},
{
"date": "2014-06-15",
"count": 1
},
{
"date": "2014-07-19",
"count": 1
},
{
"date": "2014-08-06",
"count": 1
},
{
"date": "2014-08-21",
"count": 1
},
{
"date": "2014-10-24",
"count": 1
},
{
"date": "2014-11-12",
"count": 1
},
{
"date": "2014-12-31",
"count": 1
},
{
"date": "2015-01-16",
"count": 1
},
{
"date": "2015-01-26",
"count": 1
},
{
"date": "2015-03-01",
"count": 1
},
{
"date": "2015-03-10",
"count": 1
},
{
"date": "2015-09-02",
"count": 1
},
{
"date": "2015-12-05",
"count": 1
},
{
"date": "2016-02-11",
"count": 1
},
{
"date": "2016-04-10",
"count": 1
},
{
"date": "2016-07-18",
"count": 1
},
{
"date": "2016-08-08",
"count": 1
},
{
"date": "2016-09-12",
"count": 2
},
{
"date": "2016-09-23",
"count": 1
},
{
"date": "2017-02-12",
"count": 1
},
{
"date": "2017-03-28",
"count": 1
},
{
"date": "2017-09-01",
"count": 1
},
{
"date": "2017-11-15",
"count": 1
},
{
"date": "2018-10-20",
"count": 1
},
{
"date": "2018-10-28",
"count": 1
},
{
"date": "2019-01-17",
"count": 1
},
{
"date": "2019-08-09",
"count": 1
},
{
"date": "2020-01-29",
"count": 1
},
{
"date": "2020-05-01",
"count": 1
},
{
"date": "2020-08-19",
"count": 1
},
{
"date": "2020-09-18",
"count": 1
},
{
"date": "2021-01-14",
"count": 1
},
{
"date": "2021-01-25",
"count": 1
},
{
"date": "2021-01-27",
"count": 2
},
{
"date": "2021-06-12",
"count": 1
},
{
"date": "2021-06-22",
"count": 1
},
{
"date": "2021-08-26",
"count": 1
},
{
"date": "2021-09-05",
"count": 1
},
{
"date": "2021-12-02",
"count": 1
},
{
"date": "2022-07-19",
"count": 1
},
{
"date": "2023-05-06",
"count": 1
},
{
"date": "2023-05-10",
"count": 1
},
{
"date": "2023-06-29",
"count": 1
},
{
"date": "2023-07-06",
"count": 1
},
{
"date": "2023-11-10",
"count": 1
},
{
"date": "2024-01-16",
"count": 1
},
{
"date": "2024-04-25",
"count": 1
},
{
"date": "2024-08-14",
"count": 1
},
{
"date": "2025-09-11",
"count": 1
},
{
"date": "2025-10-26",
"count": 1
},
{
"date": "2026-03-14",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-05-31",
"count": 1
},
{
"date": "2026-06-01",
"count": 1
}
],
"complete": true,
"collected": 60,
"total_forks": 60
},
"star_history": null,
"open_issues_and_prs": 13
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 29149,
"source_files_sampled": 15,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 3,
"merged_prs": 65,
"open_issues": 10,
"closed_ratio": 0.667,
"closed_issues": 20,
"closed_unmerged_prs": 13
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "dmcgowan",
"commits": 84,
"avatar_url": "https://avatars.githubusercontent.com/u/169601?v=4"
},
{
"type": "User",
"login": "thaJeztah",
"commits": 37,
"avatar_url": "https://avatars.githubusercontent.com/u/1804568?v=4"
},
{
"type": "User",
"login": "dims",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/23304?v=4"
},
{
"type": "User",
"login": "whyrusleeping",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/1243164?v=4"
},
{
"type": "User",
"login": "liggitt",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/980082?v=4"
},
{
"type": "User",
"login": "zhgwenming",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1507590?v=4"
},
{
"type": "User",
"login": "samuelkarp",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/737750?v=4"
},
{
"type": "User",
"login": "BrianBland",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/2295742?v=4"
},
{
"type": "User",
"login": "chris-crone",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/3093183?v=4"
},
{
"type": "User",
"login": "smarterclayton",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1163175?v=4"
}
],
"contributors_sampled": 17,
"top_contributor_share": 0.568
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yaml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 4,
"reason": "3 out of 7 merged PRs checked by a CI test -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 4,
"reason": "Found 7/15 approved changesets -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 19 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "c59e5d73daa301bde452ea77545bdf51e32554a2",
"ran_at": "2026-07-30T22:54:42Z",
"aggregate_score": 4.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-23T23:34:34Z",
"oldest_open_prs": [
{
"number": 108,
"created_at": "2026-03-16T12:38:52Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 110,
"created_at": "2026-04-13T17:32:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 112,
"created_at": "2026-06-01T18:18:54Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-04-13T17:36:52Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 2,
"created_at": "2014-06-07T00:27:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 31,
"created_at": "2014-10-25T00:45:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 32,
"created_at": "2014-10-25T00:56:15Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 42,
"created_at": "2015-02-06T03:32:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 44,
"created_at": "2015-02-11T21:07:44Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 45,
"created_at": "2015-02-22T23:31:40Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 74,
"created_at": "2019-05-09T15:03:09Z",
"last_comment_at": "2019-06-04T09:54:34Z",
"last_comment_author": "thaJeztah"
},
{
"number": 87,
"created_at": "2021-12-02T22:52:31Z",
"last_comment_at": "2022-02-03T01:46:07Z",
"last_comment_author": "smlx"
},
{
"number": 97,
"created_at": "2024-05-20T01:45:02Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 111,
"created_at": "2026-06-01T18:16:45Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/moby/spdystream",
"host": "github.com",
"name": "spdystream",
"owner": "moby"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 54 is calibrated to 56 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 54,
"calibrated": 56,
"calibration": "2026-08-02"
}
}
],
"value": 56,
"inputs": {
"security": 49,
"vitality": 41,
"community": 64,
"governance": 69,
"calibration": "2026-08-02",
"engineering": 46,
"ai_readiness": 58,
"weighted_overall_raw": 54
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 41,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"commits_last_year": 20,
"human_commit_share": 1,
"days_since_last_push": 108,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 108 days ago",
"points": 9.9,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 108
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "20 commits in the last year",
"points": 11.9,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 20
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"releases_count": 6,
"latest_release_tag": "v0.5.1",
"releases_from_tags": false,
"days_since_latest_release": 105,
"mean_days_between_releases": 380.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "6 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 6
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 105 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 105
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~380.9 days",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 380.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 113,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 113 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 113
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 64,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"forks": 60,
"stars": 149,
"watchers": 39,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "149 stars",
"points": 35.2,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 149
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "60 forks",
"points": 14.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 60
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "39 watchers",
"points": 8.8,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 39
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 69,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "weak",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 17,
"top_contributor_share": 0.568
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 57% of commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 57
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "17 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 17
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 19 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"merged_prs": 65,
"open_issues": 10,
"closed_issues": 20,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.667,
"closed_unmerged_prs": 13,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "67% of issues closed",
"points": 28,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 67
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "65/78 decided PRs merged",
"points": 25,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 65,
"decided": 78
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 7/15 approved changesets -- score normalized to 4",
"points": 6,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"followers": 1310,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "moby",
"public_repos": 33,
"account_age_days": 3397
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,310 followers of moby",
"points": 22.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1310,
"login": "moby"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "33 public repos, account ~9 yr old",
"points": 23.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 33
}
},
{
"code": "account_age_years",
"params": {
"years": 9
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/moby/spdystream"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 108
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 108 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 108
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "6 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 6
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "weak",
"name": "Engineering Quality",
"value": 46,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "3 out of 7 merged PRs checked by a CI test -- score normalized to 4",
"points": 8,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 49,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "3 out of 7 merged PRs checked by a CI test -- score normalized to 4",
"points": 1,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 7/15 approved changesets -- score normalized to 4",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 19 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 17
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.73,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "73 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 38.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 73,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 29149,
"source_files_sampled": 15,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/15 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 15,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [],
"labels": [],
"scores": {
"library": 3
},
"primary": null,
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 3
}
],
"artifacts": [],
"confidence": "none",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": false
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-30T22:55:01.543850Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/moby/spdystream.svg",
"full_name": "moby/spdystream",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with moby/spdystream. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
