Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 19:01 UTC

oxidecomputer / iddqd

Maps where keys are borrowed from values.

RustApache-2.0★ 399 stars⑂ 12 forkssince Apr 2025View on GitHub ↗

oxidecomputer/iddqd holds a health index of 71 out of 100, placing it in the Good band. It scores highest on Vitality (91/100) and lowest on AI Readiness (60/100). It was last updated today. A single contributor accounts for most of its recent work.

overall / 100

Good

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

Excellent85-100Exemplary; meets essentially all checked criteria

Good70-84Healthy; minor gaps

Moderate50-69Acceptable with notable gaps; review recommended

At risk30-49Significant weaknesses; adoption warrants caution

Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

Oxide Computer CompanyOrganization

2,884 followers403 public repossince Aug 2019

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

Registry	Package	Version	Downloads / mo	Versions	Last publish	Tags
crates.io	iddqd	0.4.6	546,734	31	0 days ago	hashmap bijective btreemap id-map iddqd data-structures no-std

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

91Excellent · 22% of overall

Development activity

85Excellent

How it's scored

36/36	Push recency — last push 0 days ago
20.8/36	Commit cadence — 30/52 weeks with commits
18/18	Commit volume — 229 commits in the last year
10/10	OpenSSF Scorecard: Maintained — 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10

Inputs used

commits_last_year	229
human_commit_share	0.83
days_since_last_push	0
active_weeks_last_year	30

Release discipline

100Excellent

How it's scored

27/27	Ships releases — 31 releases published
36/36	Release recency — latest release 0 days ago
27/27	Release cadence — a release every ~28.2 days
0/10	OpenSSF Scorecard: Signed-Releases — no data

Inputs used

releases_count	31
latest_release_tag	iddqd-0.4.6
releases_from_tags	no
days_since_latest_release	0
mean_days_between_releases	28.2

Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

63Moderate · 18% of overall

Popularity & adoption

53Moderate

How it's scored

42.2/60	Stars — 399 stars
8.7/25	Forks — 12 forks
1.7/15	Watchers — 3 watchers

Inputs used

forks	12
stars	399
watchers	3
growth_state	unverified
growth_factor_pct	100
growth_unverified_reason	no_history

Community health

50Moderate

How it's scored

22.5/22.5	README
22.5/22.5	License — recognized license (Apache-2.0)
0/18	CONTRIBUTING guide
0/13.5	Code of conduct
0/7.2	Issue template
0/6.3	PR template

Inputs used

has_readme	yes
has_license	yes
has_contributing	no
has_issue_template	no
has_code_of_conduct	no
has_pull_request_template	no

Ecosystem adoption (downloads)

96Excellent

How it's scored

76.5/80	Monthly downloads — 546,734 downloads/month across crates
0/20	Registry dependents — not reported by this ecosystem

Inputs used

packages	iddqd
dependents	—
ecosystems	crates
total_downloads	4,434,428
monthly_downloads	546,734

Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

64Moderate · 24% of overall

Maintainer resilience (bus factor)

26Critical

How it's scored

9/54	Bus factor — 1 contributor(s) cover half of all commits
0.4/22.5	Commit distribution — top contributor authored 98% of commits
6.8/13.5	Contributor breadth — 5 contributors
10/10	OpenSSF Scorecard: Contributors — project has 3 contributing companies or organizations -- score normalized to 10

Inputs used

bus_factor	1
contributors_sampled	5
top_contributor_share	0.981

Issue & PR responsiveness

63Moderate

How it's scored

24.5/46.8	Issue resolution — 52% of issues closed
36.7/38.3	PR acceptance — 258/269 decided PRs merged
1.5/15	OpenSSF Scorecard: Code-Review — Found 3/25 approved changesets -- score normalized to 1

Inputs used

merged_prs	258
open_issues	10
closed_issues	11
issue_closed_ratio	0.524
closed_unmerged_prs	11

Ownership & stewardship

80Good

How it's scored

30/30	Ownership backing — organization-owned
0/20	Verified domain
24.9/25	Owner reach — 2,884 followers of oxidecomputer
25/25	Track record — 403 public repos, account ~6 yr old

Inputs used

followers	2,884
owner_type	Organization
is_verified	—
owner_login	oxidecomputer
public_repos	403
account_age_days	2,536

Package maintenance

100Excellent

How it's scored

25/25	Published & resolvable — 1 package(s) on crates
35/35	Publish recency — latest publish 0 days ago
20/20	Version history — 31 published versions
20/20	Not deprecated — active, not deprecated or yanked

Inputs used

packages	iddqd
ecosystems	crates
any_deprecated	no
min_days_since_publish	0

Engineering Quality

Are baseline engineering and documentation practices in place?

71Good · 20% of overall

Engineering practices

68Moderate

How it's scored

24/24	CI workflows — 2 workflow(s)
24/24	Tests present
0/16	Linter config
0/9.6	Pre-commit hooks
0/6.4	.editorconfig
20/20	OpenSSF Scorecard: CI-Tests — 21 out of 21 merged PRs checked by a CI test -- score normalized to 10

Inputs used

has_ci	yes
has_tests	yes
has_editorconfig	no
has_linter_config	no
has_precommit_config	no

Documentation

75Good

How it's scored

30/30	README
0/25	Documentation directory
15/15	Documentation / homepage site — https://docs.rs/iddqd
10/10	Repository description
10/10	Topics — 3 topics
10/10	Wiki

Inputs used

topics	no-std, rust, rust-lang
has_wiki	yes
homepage	https://docs.rs/iddqd
has_readme	yes
has_docs_dir	no
has_description	yes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

64Moderate · 16% of overall

Security posture

55Moderate

How it's scored

7.5/7.5	Binary-Artifacts — no binaries found in the repo
2.2/7.5	Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5	CI-Tests — 21 out of 21 merged PRs checked by a CI test -- score normalized to 10
0/2.5	CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0.8/7.5	Code-Review — Found 3/25 approved changesets -- score normalized to 1
2.5/2.5	Contributors — project has 3 contributing companies or organizations -- score normalized to 10
10/10	Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5	Dependency-Update-Tool — update tool detected
0/5	Fuzzing — project is not fuzzed
2.5/2.5	License — license file detected
7.5/7.5	Maintained — 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
0/5	Packaging — no data
1.5/5	Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3
0/5	SAST — SAST tool is not run on all commits -- score normalized to 0
0/5	Security-Policy — security policy file not detected
0/7.5	Signed-Releases — no data
0/7.5	Token-Permissions — detected GitHub workflow tokens with excessive permissions
6/7.5	Vulnerabilities — 2 existing vulnerabilities detected

Inputs used

source	openssf_scorecard
checks_evaluated	16
scorecard_version	v5.5.0
checks_inconclusive	2
scorecard_aggregate	5.5

Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.

Dependency advisories

100Excellent

How it's scored

35/35	Direct dependencies free of known advisories — no direct dependency carries a known advisory
0/25	Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
0/40	No advisories left outstanding — no advisory carries a publication date

Inputs used

source	osv
advisories	2
affected_packages	2
assessed_packages	180
unassessed_packages	0
affected_by_severity	unknown 2
direct_affected_packages	0

Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 180 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

60Moderate · 0% of overall

Agent context & guidance

35At risk

How it's scored

0/45	Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15	Machine-readable docs (llms.txt)
34.7/40	Legible commit history — 54 of 83 human commits state their intent (structured subject or explanatory body)

Inputs used

has_llms_txt	no
legible_history_share	0.651
agent_instruction_files	—
agent_instruction_max_bytes	—

Verify loop (build / test / typecheck)

72Good

How it's scored

18/18	One-command bootstrap — Justfile
22/22	Automated tests
0/11	Lint / format config
11/11	Static type checking — Rust (statically typed)
10/10	Reproducible environment — lockfile
0/10	Demonstrated agent practice — no agent-authored commits among the last 100
8/8	Automated maintenance — 1 of the last 100 commits are automated dependency updates
3/10	OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3

Inputs used

has_nix	no
has_tests	yes
lockfiles	Cargo.lock
has_dockerfile	no
typed_language	yes
bootstrap_files	Justfile
has_devcontainer	no
has_linter_config	no
typecheck_configs	—
agent_commit_share	0
toolchain_manifests	Cargo.toml, crates/iddqd-benches/Cargo.toml, crates/iddqd-extended-examples/Cargo.toml, crates/iddqd-soteria-runner/Cargo.toml, crates/iddqd-test-utils/Cargo.toml, crates/iddqd/Cargo.toml
dependency_bot_commit_share	0.01

Code legibility for models

98Excellent

How it's scored

45/45	Type-checkable code — Rust (statically typed)
53.5/55	Manageable file sizes — 3/109 source files over 60KB

Inputs used

primary_language	Rust
largest_source_bytes	101,679
source_files_sampled	109
oversized_source_files	3

Machine-readable interfaces

40At risk

How it's scored

0/40	API schema (OpenAPI/GraphQL/proto)
0/20	MCP server
40/40	Runnable examples — examples

Inputs used

example_dirs	examples
has_mcp_signal	no
api_schema_files	—

Key facts

399GitHub stars

5contributors

229commits, last 12 months

0days since last push

31releases

1bus factor

10open issues

crates.iopackage ecosystems

Data collection warnings

Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch crates package 'iddqd-benches' from its registry
Could not fetch crates package 'iddqd-test-utils' from its registry
Could not fetch crates package 'iddqd-soteria-runner' from its registry
Could not fetch crates package 'iddqd-extended-examples' from its registry
deps.dev does not index crates:iddqd@0.4.6; advisories assessed against the repository dependency graph instead

More detail

Star and fork history 0 ★ / 12 ⇿

0Stars

12Forks

28Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

Major 0Minor 0Patch 0

Each point covers 2 days.

OpenSSF Scorecard 5.5 / 10

5.5aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-22 19:01 UTC

10	Binary-Artifacts	no binaries found in the repo
3	Branch-Protection	branch protection is not maximal on development and all release branches
10	CI-Tests	21 out of 21 merged PRs checked by a CI test -- score normalized to 10
0	CII-Best-Practices	no effort to earn an OpenSSF best practices badge detected
1	Code-Review	Found 3/25 approved changesets -- score normalized to 1
10	Contributors	project has 3 contributing companies or organizations -- score normalized to 10
10	Dangerous-Workflow	no dangerous workflow patterns detected
10	Dependency-Update-Tool	update tool detected
0	Fuzzing	project is not fuzzed
10	License	license file detected
10	Maintained	30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10
n/a	Packaging	packaging workflow not detected
3	Pinned-Dependencies	dependency not pinned by hash detected -- score normalized to 3
0	SAST	SAST tool is not run on all commits -- score normalized to 0
0	Security-Policy	security policy file not detected
n/a	Signed-Releases	no releases found
0	Token-Permissions	detected GitHub workflow tokens with excessive permissions
8	Vulnerabilities	2 existing vulnerabilities detected

Direct dependencies 24

Registry	Package	Version constraint	Manifest
crates.io	criterion	`—`	crates/iddqd-benches/Cargo.toml
crates.io	foldhash	`—`	crates/iddqd-benches/Cargo.toml
crates.io	iddqd	`—`	crates/iddqd-benches/Cargo.toml
crates.io	iddqd-test-utils	`—`	crates/iddqd-benches/Cargo.toml
crates.io	allocator-api2	`—`	crates/iddqd-test-utils/Cargo.toml
crates.io	bumpalo	`—`	crates/iddqd-test-utils/Cargo.toml
crates.io	camino	`—`	crates/iddqd-test-utils/Cargo.toml
crates.io	equivalent	`—`	crates/iddqd-test-utils/Cargo.toml
crates.io	hugealloc	`—`	crates/iddqd-test-utils/Cargo.toml
crates.io	iddqd	`—`	crates/iddqd-test-utils/Cargo.toml
crates.io	proptest	`—`	crates/iddqd-test-utils/Cargo.toml
crates.io	serde	`—`	crates/iddqd-test-utils/Cargo.toml
crates.io	serde_json	`—`	crates/iddqd-test-utils/Cargo.toml
crates.io	test-strategy	`—`	crates/iddqd-test-utils/Cargo.toml
crates.io	allocator-api2	`—`	crates/iddqd/Cargo.toml
crates.io	daft	`—`	crates/iddqd/Cargo.toml
crates.io	equivalent	`—`	crates/iddqd/Cargo.toml
crates.io	foldhash	`—`	crates/iddqd/Cargo.toml
crates.io	hashbrown	`—`	crates/iddqd/Cargo.toml
crates.io	ref-cast	`—`	crates/iddqd/Cargo.toml
crates.io	schemars	`—`	crates/iddqd/Cargo.toml
crates.io	serde_core	`—`	crates/iddqd/Cargo.toml
crates.io	serde_json	`—`	crates/iddqd/Cargo.toml
crates.io	proptest	`—`	crates/iddqd/Cargo.toml

All dependencies 180

Full resolved dependency set from the GitHub dependency graph: 19 direct and 161 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

Registry	Package	Version	Relation
crates.io	allocator-api2	`0.2.21`	direct
crates.io	bumpalo	`3.19.0`	direct
crates.io	camino	`1.2.4`	direct
crates.io	criterion	`0.7.0`	direct
crates.io	daft	`0.1.5`	direct
crates.io	equivalent	`1.0.2`	direct
crates.io	foldhash	`0.1.5`	direct
crates.io	foldhash	`0.2.0`	direct
crates.io	hashbrown	`0.12.3`	direct
crates.io	hashbrown	`0.15.4`	direct
crates.io	hashbrown	`0.17.1`	direct
crates.io	hugealloc	`0.1.1`	direct
crates.io	proptest	`1.7.0`	direct
crates.io	ref-cast	`1.0.25`	direct
crates.io	schemars	`0.8.22`	direct
crates.io	serde	`1.0.228`	direct
crates.io	serde_core	`1.0.228`	direct
crates.io	serde_json	`1.0.145`	direct
crates.io	test-strategy	`0.4.3`	direct
crates.io	adler2	`2.0.1`	indirect
crates.io	aho-corasick	`1.1.3`	indirect
crates.io	anes	`0.1.6`	indirect
crates.io	anstream	`0.6.21`	indirect
crates.io	anstyle	`1.0.11`	indirect
crates.io	anstyle-parse	`0.2.7`	indirect
crates.io	anstyle-query	`1.1.5`	indirect
crates.io	anstyle-wincon	`3.0.11`	indirect
crates.io	atomicwrites	`0.4.4`	indirect
crates.io	autocfg	`1.5.0`	indirect
crates.io	bitflags	`2.9.1`	indirect
crates.io	cast	`0.3.0`	indirect
crates.io	cbindgen	`0.29.4`	indirect
crates.io	cfg-if	`1.0.1`	indirect
crates.io	chacha20	`0.10.1`	indirect
crates.io	ciborium	`0.2.2`	indirect
crates.io	ciborium-io	`0.2.2`	indirect
crates.io	ciborium-ll	`0.2.2`	indirect
crates.io	clap	`4.5.43`	indirect
crates.io	clap_builder	`4.5.43`	indirect
crates.io	clap_lex	`0.7.5`	indirect
crates.io	colorchoice	`1.0.5`	indirect
crates.io	console	`0.15.11`	indirect
crates.io	cpufeatures	`0.3.0`	indirect
crates.io	crc32fast	`1.5.0`	indirect
crates.io	criterion-plot	`0.6.0`	indirect
crates.io	crossbeam-deque	`0.8.6`	indirect
crates.io	crossbeam-epoch	`0.9.18`	indirect
crates.io	crossbeam-utils	`0.8.21`	indirect
crates.io	crunchy	`0.2.4`	indirect
crates.io	dashu-base	`0.4.3`	indirect
crates.io	dashu-int	`0.4.3`	indirect
crates.io	derive-ex	`0.1.8`	indirect
crates.io	dyn-clone	`1.0.19`	indirect
crates.io	either	`1.15.0`	indirect
crates.io	encode_unicode	`1.0.0`	indirect
crates.io	errno	`0.3.13`	indirect
crates.io	expectorate	`1.2.0`	indirect
crates.io	fastrand	`2.3.0`	indirect
crates.io	getrandom	`0.3.3`	indirect
crates.io	getrandom	`0.4.3`	indirect
crates.io	glob	`0.3.3`	indirect
crates.io	half	`2.6.0`	indirect
crates.io	heck	`0.5.0`	indirect
crates.io	hegeltest	`0.23.1`	indirect
crates.io	hegeltest-c	`0.23.1`	indirect
crates.io	hegeltest-macros	`0.23.1`	indirect
crates.io	indexmap	`1.9.3`	indirect
crates.io	indexmap	`2.14.0`	indirect
crates.io	is_terminal_polyfill	`1.70.2`	indirect
crates.io	itertools	`0.13.0`	indirect
crates.io	itoa	`1.0.15`	indirect
crates.io	js-sys	`0.3.77`	indirect
crates.io	lazy_static	`1.5.0`	indirect
crates.io	libc	`0.2.174`	indirect
crates.io	linux-raw-sys	`0.4.15`	indirect
crates.io	linux-raw-sys	`0.9.4`	indirect
crates.io	lock_api	`0.4.14`	indirect
crates.io	log	`0.4.27`	indirect
crates.io	memchr	`2.7.4`	indirect
crates.io	miniz_oxide	`0.8.9`	indirect
crates.io	newline-converter	`0.3.0`	indirect
crates.io	num-modular	`0.6.4`	indirect
crates.io	num-traits	`0.2.19`	indirect
crates.io	once_cell	`1.21.3`	indirect
crates.io	once_cell_polyfill	`1.70.2`	indirect
crates.io	oorandom	`11.1.5`	indirect
crates.io	parking_lot	`0.12.5`	indirect
crates.io	parking_lot_core	`0.9.12`	indirect
crates.io	paste	`1.0.15`	indirect
crates.io	plotters	`0.3.7`	indirect
crates.io	plotters-backend	`0.3.7`	indirect
crates.io	plotters-svg	`0.3.7`	indirect
crates.io	ppv-lite86	`0.2.21`	indirect
crates.io	proc-macro2	`1.0.95`	indirect
crates.io	quote	`1.0.40`	indirect
crates.io	r-efi	`5.2.0`	indirect
crates.io	r-efi	`6.0.0`	indirect
crates.io	rand	`0.10.1`	indirect
crates.io	rand	`0.9.4`	indirect
crates.io	rand_chacha	`0.9.0`	indirect
crates.io	rand_core	`0.10.1`	indirect
crates.io	rand_core	`0.9.3`	indirect
crates.io	rand_xorshift	`0.4.0`	indirect
crates.io	rayon	`1.10.0`	indirect
crates.io	rayon-core	`1.12.1`	indirect
crates.io	redox_syscall	`0.5.18`	indirect
crates.io	ref-cast-impl	`1.0.25`	indirect
crates.io	regex	`1.11.1`	indirect
crates.io	regex-automata	`0.4.9`	indirect
crates.io	regex-syntax	`0.8.5`	indirect
crates.io	regress	`0.10.3`	indirect
crates.io	rustc-hash	`2.1.2`	indirect
crates.io	rustix	`0.38.44`	indirect
crates.io	rustix	`1.0.7`	indirect
crates.io	rustversion	`1.0.21`	indirect
crates.io	ryu	`1.0.20`	indirect
crates.io	same-file	`1.0.6`	indirect
crates.io	schemars_derive	`0.8.22`	indirect
crates.io	scopeguard	`1.2.0`	indirect
crates.io	semver	`1.0.26`	indirect
crates.io	serde_derive	`1.0.228`	indirect
crates.io	serde_derive_internals	`0.29.1`	indirect
crates.io	serde_spanned	`1.1.1`	indirect
crates.io	serde_tokenstream	`0.2.2`	indirect
crates.io	similar	`2.7.0`	indirect
crates.io	smallvec	`1.15.2`	indirect
crates.io	sptr	`0.3.2`	indirect
crates.io	static_assertions	`1.1.0`	indirect
crates.io	strsim	`0.11.1`	indirect
crates.io	structmeta	`0.3.0`	indirect
crates.io	structmeta-derive	`0.3.0`	indirect
crates.io	syn	`2.0.104`	indirect
crates.io	target-triple	`1.0.0`	indirect
crates.io	tempfile	`3.20.0`	indirect
crates.io	termcolor	`1.4.1`	indirect
crates.io	thiserror	`2.0.12`	indirect
crates.io	thiserror-impl	`2.0.12`	indirect
crates.io	tinytemplate	`1.2.1`	indirect
crates.io	toml	`0.9.12+spec-1.1.0`	indirect
crates.io	toml	`1.1.2+spec-1.1.0`	indirect
crates.io	toml_datetime	`0.7.5+spec-1.1.0`	indirect
crates.io	toml_datetime	`1.1.1+spec-1.1.0`	indirect
crates.io	toml_parser	`1.1.2+spec-1.1.0`	indirect
crates.io	toml_writer	`1.1.1+spec-1.1.0`	indirect
crates.io	trybuild	`1.0.116`	indirect
crates.io	typify	`0.4.2`	indirect
crates.io	typify-impl	`0.4.2`	indirect
crates.io	typify-macro	`0.4.2`	indirect
crates.io	unarray	`0.1.4`	indirect
crates.io	unicode-ident	`1.0.18`	indirect
crates.io	unicode-segmentation	`1.12.0`	indirect
crates.io	unicode-width	`0.2.0`	indirect
crates.io	utf8parse	`0.2.2`	indirect
crates.io	walkdir	`2.5.0`	indirect
crates.io	wasi	`0.14.2+wasi-0.2.4`	indirect
crates.io	wasm-bindgen	`0.2.100`	indirect
crates.io	wasm-bindgen-backend	`0.2.100`	indirect
crates.io	wasm-bindgen-macro	`0.2.100`	indirect
crates.io	wasm-bindgen-macro-support	`0.2.100`	indirect
crates.io	wasm-bindgen-shared	`0.2.100`	indirect
crates.io	web-sys	`0.3.77`	indirect
crates.io	winapi-util	`0.1.9`	indirect
crates.io	windows-link	`0.2.1`	indirect
crates.io	windows-sys	`0.52.0`	indirect
crates.io	windows-sys	`0.59.0`	indirect
crates.io	windows-sys	`0.61.2`	indirect
crates.io	windows-targets	`0.52.6`	indirect
crates.io	windows_aarch64_gnullvm	`0.52.6`	indirect
crates.io	windows_aarch64_msvc	`0.52.6`	indirect
crates.io	windows_i686_gnu	`0.52.6`	indirect
crates.io	windows_i686_gnullvm	`0.52.6`	indirect
crates.io	windows_i686_msvc	`0.52.6`	indirect
crates.io	windows_x86_64_gnu	`0.52.6`	indirect
crates.io	windows_x86_64_gnullvm	`0.52.6`	indirect
crates.io	windows_x86_64_msvc	`0.52.6`	indirect
crates.io	winnow	`0.7.15`	indirect
crates.io	winnow	`1.0.3`	indirect
crates.io	wit-bindgen-rt	`0.39.0`	indirect
crates.io	zerocopy	`0.8.26`	indirect
crates.io	zerocopy-derive	`0.8.26`	indirect

Dependency advisories 2

This repository publishes no package the index resolves, so its own dependency graph was assessed — 180 packages, which also include development and test pins that never ship: 2 carry known advisories, of which 0 are direct.

Package	Version	Relation	Severity	Advisories	Fixed in
crossbeam-epoch	`0.9.18`	indirect	unknown	1	`0.9.20`
paste	`1.0.15`	indirect	unknown	1	—

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable

{
  "data": {
    "repo": {
      "topics": [
        "no-std",
        "rust",
        "rust-lang"
      ],
      "is_fork": false,
      "size_kb": 1539,
      "has_wiki": true,
      "homepage": "https://docs.rs/iddqd",
      "languages": {
        "Just": 1254,
        "Rust": 1088138,
        "Shell": 2963
      },
      "pushed_at": "2026-07-22T11:08:57Z",
      "created_at": "2025-04-01T00:27:01Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-21T22:31:07Z",
      "description": "Maps where keys are borrowed from values.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Rust",
      "significant_languages": [
        "Rust"
      ]
    },
    "owner": {
      "blog": "https://oxide.computer",
      "name": "Oxide Computer Company",
      "type": "Organization",
      "login": "oxidecomputer",
      "company": null,
      "location": "Emeryville, California",
      "followers": 2884,
      "avatar_url": "https://avatars.githubusercontent.com/u/54040662?v=4",
      "created_at": "2019-08-12T18:54:51Z",
      "is_verified": null,
      "public_repos": 403,
      "account_age_days": 2536
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "iddqd-0.4.6",
          "kind": "other",
          "published_at": "2026-07-21T22:31:33Z"
        },
        {
          "tag": "iddqd-0.4.5",
          "kind": "other",
          "published_at": "2026-06-17T20:45:39Z"
        },
        {
          "tag": "iddqd-0.4.4",
          "kind": "other",
          "published_at": "2026-06-09T17:32:20Z"
        },
        {
          "tag": "iddqd-0.4.3",
          "kind": "other",
          "published_at": "2026-06-08T21:00:20Z"
        },
        {
          "tag": "iddqd-0.4.2",
          "kind": "other",
          "published_at": "2026-05-23T03:09:43Z"
        },
        {
          "tag": "iddqd-0.4.1",
          "kind": "other",
          "published_at": "2026-05-16T01:22:02Z"
        },
        {
          "tag": "iddqd-0.4.0",
          "kind": "other",
          "published_at": "2026-05-04T21:44:28Z"
        },
        {
          "tag": "iddqd-0.3.18",
          "kind": "other",
          "published_at": "2026-04-23T01:10:51Z"
        },
        {
          "tag": "iddqd-0.3.17",
          "kind": "other",
          "published_at": "2025-11-22T18:28:46Z"
        },
        {
          "tag": "iddqd-0.3.16",
          "kind": "other",
          "published_at": "2025-11-09T19:44:32Z"
        },
        {
          "tag": "iddqd-0.3.15",
          "kind": "other",
          "published_at": "2025-11-09T01:03:02Z"
        },
        {
          "tag": "iddqd-0.3.14",
          "kind": "other",
          "published_at": "2025-09-29T18:22:00Z"
        },
        {
          "tag": "iddqd-0.3.13",
          "kind": "other",
          "published_at": "2025-09-15T00:24:29Z"
        },
        {
          "tag": "iddqd-0.3.12",
          "kind": "other",
          "published_at": "2025-09-12T19:40:44Z"
        },
        {
          "tag": "iddqd-0.3.11",
          "kind": "other",
          "published_at": "2025-08-14T18:33:49Z"
        },
        {
          "tag": "iddqd-0.3.10",
          "kind": "other",
          "published_at": "2025-08-12T22:23:36Z"
        },
        {
          "tag": "iddqd-0.3.9",
          "kind": "other",
          "published_at": "2025-07-22T05:50:53Z"
        },
        {
          "tag": "iddqd-0.3.8",
          "kind": "other",
          "published_at": "2025-06-23T01:51:55Z"
        },
        {
          "tag": "iddqd-0.3.7",
          "kind": "other",
          "published_at": "2025-06-11T22:30:33Z"
        },
        {
          "tag": "iddqd-0.3.6",
          "kind": "other",
          "published_at": "2025-06-06T19:04:55Z"
        },
        {
          "tag": "iddqd-0.3.5",
          "kind": "other",
          "published_at": "2025-06-05T20:41:19Z"
        },
        {
          "tag": "iddqd-0.3.4",
          "kind": "other",
          "published_at": "2025-06-03T21:30:08Z"
        },
        {
          "tag": "iddqd-0.3.3",
          "kind": "other",
          "published_at": "2025-05-27T19:39:37Z"
        },
        {
          "tag": "iddqd-0.3.2",
          "kind": "other",
          "published_at": "2025-05-25T03:01:26Z"
        },
        {
          "tag": "iddqd-0.3.1",
          "kind": "other",
          "published_at": "2025-05-22T20:21:31Z"
        },
        {
          "tag": "iddqd-0.3.0",
          "kind": "other",
          "published_at": "2025-05-22T19:59:25Z"
        },
        {
          "tag": "iddqd-0.2.1",
          "kind": "other",
          "published_at": "2025-05-22T07:21:44Z"
        },
        {
          "tag": "iddqd-0.2.0",
          "kind": "other",
          "published_at": "2025-05-22T03:35:11Z"
        },
        {
          "tag": "iddqd-0.1.2",
          "kind": "other",
          "published_at": "2025-05-22T01:07:42Z"
        },
        {
          "tag": "iddqd-0.1.1",
          "kind": "other",
          "published_at": "2025-05-21T21:12:55Z"
        },
        {
          "tag": "iddqd-0.1.0",
          "kind": "other",
          "published_at": "2025-05-21T19:54:27Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "9ece0e9b4379ab34ab6aee44bd45e91ca59f15f7",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] version 0.4.6",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-07-21T22:30:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6aa88dfb33e14dca6d35f3f906215dfce6cfbfe3",
          "body": null,
          "is_bot": false,
          "headline": "[meta] prepare release",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-07-21T22:30:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ebaa118787ad7b2ca9bfedaca5eff9968f59e83c",
          "body": null,
          "is_bot": false,
          "headline": "cap size-hint based preallocation to a reasonable value (#307)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-07-21T22:27:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36d8754c5fd0540f2024d0fef61faf39e362a8bf",
          "body": "`IdOrdMap` had a `from_iter_unique`, but the other maps didn't. Add the\nremaining impls.",
          "is_bot": false,
          "headline": "add remaining from_iter_unique methods (#306)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-07-20T01:38:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5abdce21ab598aba7bbe590e673a9c2f2653a403",
          "body": "…failure (#305)\n\nNoticed while reviewing #303.",
          "is_bot": false,
          "headline": "make IdHashMap::insert_overwrite not abort the process on allocation …",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-07-20T00:59:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18cb3258c2f5b37b60482cda5a72495c2d823bdf",
          "body": "Hello, again! :wave: While I was reading about\n`IdOrdMap::from_iter_unique` and writing up\nhttps://github.com/oxidecomputer/iddqd/pull/300, it occurred to me that\nthe method might be doing extra work.\n\nSpecifically, it _seems_ like we're checking for duplicates twice:\n- the first check happens in `m\n[…]\nto start with a minimal diff, and if the general idea\nmakes sense and feels valuable -- happy to iterate on the implementation\nbased on feedback!\n\n---------\n\nCo-authored-by: Rain <rain@oxide.computer>",
          "is_bot": false,
          "headline": "Avoid rechecking for duplicates in IdOrdMap::from_iter_unique (#303)",
          "author_name": "Ivan Žužak",
          "author_login": "izuzak",
          "committed_at": "2026-07-19T23:52:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "37fb3b91d4784d74b054724d5f8fa5fca8a8289f",
          "body": "Preparation for #303.\n\n* Add a standard test for from_iter_unique.\n* Add `FlipItem` tests.",
          "is_bot": false,
          "headline": "add some tests for insert_overwrite/from_iter_unique behavior (#304)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-07-19T22:32:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8410936f32c584ad467cccd2350a9637f58fa6b8",
          "body": "… (#300)\n\n👋 Hello! I was reading some code using `IdOrdMap` and then went on to\nread some of `IdOrdMap`'s implementation bits.\n\nAs I was reading a comment in `from_iter_unique` (side-note: many thanks\nfor leaving useful comments like that -- I was wondering about exactly\nthe thing the comment talks \n[…]\nse this\" idea.\nI _think_ it should be referring to `insert_unique` instead. So, I'm\ndoing my open-source duty and offering a tiny PR to update this.\n\nApologies for the noise if I misunderstood things!",
          "is_bot": false,
          "headline": "Point to insert_unique in code comment for IdOrdMap::from_iter_unique…",
          "author_name": "Ivan Žužak",
          "author_login": "izuzak",
          "committed_at": "2026-07-17T00:32:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "82bbad02fc3a60283fd12495334a6ee16d81f248",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)\n| action | digest | [`9bcaee1` ->\n`5ebac0d`](https://redirect.github.com/taiki-e/install-action/compare/9bcaee1...5ebac0d)\n|\n\n[…]\nCIsInVwZGF0ZWRJblZlciI6IjQzLjI1Ni4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update taiki-e/install-action digest to 5ebac0d (#296)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2026-07-09T05:57:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7992939a653e39456fe5e46a226c76100e8e01ba",
          "body": null,
          "is_bot": true,
          "headline": "Update Rust crate ref-cast to 1.0.25 (#173)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2026-07-09T02:31:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14f86714ccb7e0866d5694b76d4ed3cddcd76acd",
          "body": null,
          "is_bot": true,
          "headline": "Update serde monorepo to 1.0.228 (#147)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2026-07-09T02:31:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59d9163a413525e8271f88f899995aeca371bf7d",
          "body": null,
          "is_bot": true,
          "headline": "Update Rust crate camino to 1.2.4 (#294)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2026-07-09T02:31:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e218529330a619553a6dd709c03898cbd1e49482",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)\n| action | digest | [`b8cecb8` ->\n`9bcaee1`](https://redirect.github.com/taiki-e/install-action/compare/b8cecb8...9bcaee1)\n|\n\n[…]\nCIsInVwZGF0ZWRJblZlciI6IjQzLjI0OS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update taiki-e/install-action digest to 9bcaee1 (#293)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2026-06-30T05:37:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "07870885913ddb41d85c9ad7fedd3725e935bb25",
          "body": null,
          "is_bot": true,
          "headline": "Update Rust crate hashbrown to 0.17.1 (#227)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2026-06-30T02:29:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da746912ac33a03f75e67cea38fd9c21c75ae147",
          "body": null,
          "is_bot": false,
          "headline": "add #292 to .git-blame-ignore-revs",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-25T22:37:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94d75269ab3254c37fdd90058db6243119d725bf",
          "body": "…292)\n\nFollowup from #291. Purely mechanical, no behavior change.\n\nThis commit will be added to `.git-blame-ignore-revs` once it lands.",
          "is_bot": false,
          "headline": "[integration-tests] inline shadow bindings and drop module nesting (#…",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-25T22:36:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20e9cd57792ceb3865d227a6da3bb499bb8eff46",
          "body": "The newest versions of hegel no longer need `uv` or Python so I feel\nmuch better porting over the tests to this model.\n\nThe commit is written slightly weirdly to try and preserve as much blame\nas possible. The next commit will fix up the indents and remove the\nshadow bindings (`let map = &mut self.map`), etc, with the idea that\nit'll be listed in `.git-blame-ignore-revs`.\n\nAlso update the MSRV to 1.86 since Hegel requires this.",
          "is_bot": false,
          "headline": "[integration-tests] port proptests to hegel state machines (#291)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-25T22:00:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "632b9d4abd74560b2d63366d42711974b053bd86",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)\n| action | digest | [`62da238` ->\n`b8cecb8`](https://redirect.github.com/taiki-e/install-action/compare/62da238...b8cecb8)\n|\n\n[…]\nCIsInVwZGF0ZWRJblZlciI6IjQzLjIzMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update taiki-e/install-action digest to b8cecb8 (#288)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2026-06-19T08:19:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "762a5e250a56d50f8c63071796aae5d793c41fb4",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[taiki-e/create-gh-release-action](https://redirect.github.com/taiki-e/create-gh-release-action)\n| action | digest | [`26b8050` ->\n`eba8ea9`](https://redirect.github.com/taiki-e/create-gh-release-action\n[…]\nCIsInVwZGF0ZWRJblZlciI6IjQzLjIzMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update taiki-e/create-gh-release-action digest to eba8ea9 (#287)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2026-06-19T06:11:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "789a4dbf12ef79577fa5184f21fbbe47f2b2e1f5",
          "body": "We now use a list + embedded free chain.",
          "is_bot": false,
          "headline": "fix storage scheme docs",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-18T02:19:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b1198671e0f1566b09d5804e63c33e95c64d956",
          "body": null,
          "is_bot": true,
          "headline": "Bump rand from 0.9.1 to 0.9.4 (#231)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-17T21:15:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72df1a43623aa0e7ca614561372ecd90b94e8c9f",
          "body": "No reason for it to be anything other than the default 0.1.0.",
          "is_bot": false,
          "headline": "bump down the iddqd-soteria-runner version",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-17T21:00:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04d137d938581d043638fd028cc96bab701fff0b",
          "body": null,
          "is_bot": false,
          "headline": "set package.metadata.release = false in iddqd-soteria-runner",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-17T20:55:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c830d7fa50e6a803efbae061f2a88c92458c9056",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd-soteria-runner] version 0.4.5",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-17T20:45:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8beff6e94f80e25c9685f1ff901255bcf7160285",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] version 0.4.5",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-17T20:45:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb52bc8e93574205a04fade9857bed0ccbd21087",
          "body": null,
          "is_bot": false,
          "headline": "[meta] update changelog",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-17T20:44:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8477e7c32e58f19fee09042d2c2e30e5a4e1d41",
          "body": "Rendered:\n\n<img width=\"1044\" height=\"1379\" alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/a3025313-5989-4077-8434-d3bb6b1dc403\"\n/>",
          "is_bot": false,
          "headline": "BiHashMap::entry now has examples for unique and non-unique items (#285)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-17T20:39:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77c8b33f34f55127539c22b12bbdb714f91cec8a",
          "body": null,
          "is_bot": false,
          "headline": "add formal verification + link to blog post (#286)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-17T20:29:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a794b0a57d18ca3ef5cc261cfbcb6b970301acb4",
          "body": "Unfortunately Soteria can't currently do `format!`, so panic with the\nmessage as a literal.",
          "is_bot": false,
          "headline": "better validation failure messages under Soteria (#284)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-16T03:05:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "24e191e3e0597a6dea952c0cf6420c53fd4979d2",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] extend the Soteria proofs to IdOrdMap (#283)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-15T22:03:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6c059fed68300763724604435e4305bb7a9cce3",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] extend the Soteria proofs to BiHashMap and TriHashMap (#282)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-15T20:48:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "614e857faf45d329a57c14eaa33da630bde0bfd3",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] prove IdHashMap invariants under adversarial hashing (#281)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-15T20:22:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61d935731b2522d2bf821235f55dcac5246083fd",
          "body": "We previously used a BTreeSet here, which is much slower under Soteria.",
          "is_bot": false,
          "headline": "[iddqd] validate duplicate indexes with sort + dedup (#280)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-15T18:23:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca7e2b1d19e439ec340674eb1e55b053a6efc2a4",
          "body": "…278)\n\nStart adding the machinery to run Soterial symbolic-execution proofs:\n\n* A dedicated `iddqd-soteria-runner` crate turns each proof into a\nseparate test that shells out to one `soteria-rust` entrypoint.\n* A nextest `soteria` profile compiles the ULLBC once up front and then\nschedules the proof\n[…]\nA new `just soteria` command drives the whole thing.\n\nThis requires Soteria to be installed, so normal test runs skip the\nproofs entirely.\n\nAlso add a couple of simple unit-level proofs for `ItemSet`.",
          "is_bot": false,
          "headline": "[iddqd] add a Soteria proof harness and some simple ItemSet proofs (#…",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-12T01:22:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c54718dad140af07b148eeabf87bb94646714644",
          "body": "Soteria's symbolic memory model cannot deal with hashbrown's SwissTable.\nUnder `cfg(soteria)`, swap hashbrown's `HashTable` for a simple\nlinear-scan table exposing the same surface `MapHashTable` uses.",
          "is_bot": false,
          "headline": "[iddqd] use a linear-scan hash table under cfg(soteria) (#277)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-11T23:31:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c8c59078419dc2814aaf80aaa80c9b5c32fc802",
          "body": "The `validate` method does two conceptually different things:\n\n* It checks the map's structural invariants (the item set is\nwell-formed; each hash table holds exactly one entry per live item; no\nduplicate ItemIndexes).\n* Every key->item mapping through the user `Hash` is valid.\n\nObserve that only th\n[…]\nert soundness even under an adversarial or buggy hasher, where the\nlogical key->item mapping is allowed to desync but the structure must\nnot.\n\nAlso exercise this in the pathological adversarial tests.",
          "is_bot": false,
          "headline": "[iddqd] split structural validation into validate_structural (#276)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-11T23:20:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "186a89194ca33e321dbf121ac9ea2e087adbfd1b",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] version 0.4.4",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-09T17:31:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0d512f9b9e2a96b1a7e827b088a1ae221655c85",
          "body": null,
          "is_bot": false,
          "headline": "update changelog",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-09T17:31:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9c68c22be0a7ffcf7c12f89703403d8216b73f7",
          "body": "Delegate to the Extend implementations.\n\nCloses #273.",
          "is_bot": false,
          "headline": "reserve capacity in FromIterator implementations (#274)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-09T17:30:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "581ff99a46e25cbd99e67508dc53479ac4bbc847",
          "body": "`Q` is more standard in the Rust ecosystem, and is also the name of the\ntype we use within `iddqd`.",
          "is_bot": false,
          "headline": "lookup type L -> query type Q (#275)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-09T17:15:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74ad804ca09be1303601dad800e16a5c0492eb61",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] version 0.4.3",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-08T20:59:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "108cfc8297ae49d0b875f0e5fc0c7eeea8e4e114",
          "body": null,
          "is_bot": false,
          "headline": "[meta] update changelog",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-08T20:59:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab86d9d010e49dc0369bf6fa22530c3df8e9a80d",
          "body": "## Summary\n\nFixes a panic-safety issue in `BiHashMap` and `TriHashMap` overwrite\npaths.\n\nPreviously, `insert_overwrite` could remove conflicting entries before\nthe overwrite operation had completed. If later panic-capable work in\nthe overwrite path panicked, the map could be left partially modified.\n[…]\nnd\ndrafting PR text. I guided the work, reviewed the final patch, and ran\nthe listed checks.\n\n---------\n\nCo-authored-by: SG <sg-devel.debug186@passinbox.com>\nCo-authored-by: Rain <rain@oxide.computer>",
          "is_bot": false,
          "headline": "Fix BiHashMap and TriHashMap overwrite preparation panic safety (#267)",
          "author_name": "Sebastian",
          "author_login": "SG-devel",
          "committed_at": "2026-06-08T20:56:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "450a1cd98c7b925069012841b8ecfc6f4702b2ee",
          "body": "…(#272)\n\nCover `insert_overwrite` and the Entry API.",
          "is_bot": false,
          "headline": "[integration-tests] more coverage for pathological silent-key-change …",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-08T19:17:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc0ae3a62c86327e6f7801b67280b78234938680",
          "body": "…tests (#271)",
          "is_bot": false,
          "headline": "[integration-tests] cover OccupiedEntry insert/remove in model-based …",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-08T17:19:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd69af7d6c2da16b51c89b331c48a31c5c5fd8ed",
          "body": "…(#270)\n\nFor `IdHashMap` and `IdOrdMap`, `insert_overwrite` already delegates to\n`OccupiedEntry::insert` so it is a bit redundant. But the code paths are\ngenuinely different for `BiHashMap`, and it's nice for everything to be\nuniform.",
          "is_bot": false,
          "headline": "[integration-tests] cover OccupiedEntry replace/remove in panic PBTs …",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-08T02:22:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12515ca51efc8b8acf886abfe3f64a1d114f4766",
          "body": "This is another spot in user code that can panic.",
          "is_bot": false,
          "headline": "[integration-tests] observe panic triggers while extracting keys (#269)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-08T02:00:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "070e98d62d57b8c760ebeaaa62e1fd1a23d51c86",
          "body": "Just rely on the free-standing `observe_panicky_call` function.",
          "is_bot": false,
          "headline": "[integration-tests] remove PanickyKey::observe_call (#268)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-06-08T01:38:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd52024760267ce0a5bcd5b98a745a4b4468ebe5",
          "body": "Was part of an attempt to do something slightly different -- we went in\na separate direction with `ValuesMut`.",
          "is_bot": false,
          "headline": "remove dead item_set::IterMut (#265)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-25T23:19:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1588c91bb7d120f9175533c0f36fdcf58c84f13c",
          "body": "* Move the panic safety module to iddqd-test-utils.\n* Add an observation mode to dump the number of calls into a TSV.\n* Improve the panic countdown distribution based on the empirical\ndistribution.\n* Justify the low number of proptest cases.",
          "is_bot": false,
          "headline": "[iddqd] improve panic safety tests (#264)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-23T22:15:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "adfda823dfef84db87fed3f567fe5e3381ac2cc8",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] version 0.4.2",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-23T03:09:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60b8e98e65646a7590733b09df736cf2b6788711",
          "body": null,
          "is_bot": false,
          "headline": "update readme and changelog, enable cargo release auto-replacement",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-23T03:08:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77a9d867897bdd22140ac8b76f18912a5cc14aa9",
          "body": "…Mut stashing (#262)\n\nEnsure that the refs can't outlive the callback.",
          "is_bot": false,
          "headline": "add compile-fail tests for and_modify and OccupiedEntry::for_each Ref…",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-23T03:02:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e88150c338c74dbad2f4057fd4bae3d2bfa9b2a",
          "body": "Match how the hash maps work.\n\nWe can't test for this with our PBTs because we don't expose an\nallocator type parameter.",
          "is_bot": false,
          "headline": "swap IdOrdMap insertion order to defend against allocator panics (#261)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-23T02:47:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e63bb797bb8f9c47fe2465b9ca4d8a2e06c63c7",
          "body": "This found a bug in shrink and shrink_to_fit.",
          "is_bot": false,
          "headline": "panic safety PBTs now cover allocator panics (#260)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-23T02:18:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf5d972fa3ffc110186f29fbe00fccd3e9003ebe",
          "body": "… (#259)\n\nEnsure that the tables don't have dangling references to vacant items.",
          "is_bot": false,
          "headline": "extend panic safety tests to item Drop, fix issues identified by PBTs…",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-22T23:10:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19c1d15abfc1e0f2694d49d061832fe6ee2d31dd",
          "body": "Similar to the recent `IdOrdMap` fix in #255. See the comments for more\ndetails.",
          "is_bot": false,
          "headline": "implement linear-scan fallback for removing from hash maps (#258)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-22T21:06:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d58b09084add7dfd24eeb9b4fb5aba75e2c21df0",
          "body": "Avoid calling user code during rehashing, preventing situations where\nthe hash table has duplicate indexes. (This isn't a soundness issue\ntoday, but could very well be one in the future.)\n\nAlso add tests to catch this.",
          "is_bot": false,
          "headline": "for hash tables, cache hash with index (#257)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-22T20:39:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99c3fa7c6b649a411e1b0117513e7bab1d144b9c",
          "body": "Realized during automated review that a sufficiently pathological\ncomparator can result in duplicate indexes, leading to mutable aliasing\nof the same memory.\n\nUse the indexes themselves as a tie-breaker so that duplicate indexes\nare prevented by construction.",
          "is_bot": false,
          "headline": "make Ordering::Equal bijective with ItemIndex (#256)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-22T19:42:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48dfbfcfa37131b0b456c76aac833dc257e62154",
          "body": "* Use a two-phase commit pattern where no user code runs in between\nchanging the btree table and changing the map. This requires switching\nover from `BTreeSet` to `BTreeMap<_, ()>`, but that is just what's\nrequired to be able to express this pattern.\n* If, for whatever reason (either a buggy compara\n[…]\nry), an efficient remove lookup didn't work, switch to a linear\nscan to ensure the index is removed. This ends up being load-bearing for\naliasing.\n* Extend the panic safety tests to also cover `Drop`.",
          "is_bot": false,
          "headline": "more resiliency to buggy user code in IdOrdMap (#255)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-22T16:56:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6782ee1a7bb8ee65e4855ae7fa28f250fbeff301",
          "body": "Previously, under pathological Eq impls, we could leave the item set and\nhash table in a desynchronized state. With this change, we compute the\nindex to remove _once_ and use that everywhere.\n\nAlso add pathological tests to exercise this case.",
          "is_bot": false,
          "headline": "while removing from hash maps, only do hash lookups once (#254)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-22T07:44:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "facdc5653212c3c9c76b480764b4c2e5960ed979",
          "body": "The `retain` signature was wrong -- we could previously stash away items\nand then return `false`, causing a use-after-free. Restrict the\nlifetime, and add UI tests to ensure that it always fails.\n\nThis is technically a breaking change but we're treating it as a\nsoundness bugfix.",
          "is_bot": false,
          "headline": "disallow retain from stashing away items (#252)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-22T07:10:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "578a9af2521d050e019a55bbc94e5096d9381cbe",
          "body": "Needed by some upcoming dependencies.",
          "is_bot": false,
          "headline": "[meta] bump MSRV to Rust 1.85 (#253)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-22T06:47:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8adf189a3e51482f69e58dbea6cb419244be99e",
          "body": "…e (#251)\n\nRealized we should have an explicit test with explanations for this.",
          "is_bot": false,
          "headline": "add pathological test for insert_cmp short-circuit load-bearing natur…",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-22T06:07:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7364432eeeac7ad5afff25bc1fc6364ff8f490f3",
          "body": "One test was duplicated, and another should really live in\n`bi_hash_map.rs`.",
          "is_bot": false,
          "headline": "[iddqd] clean up pathological tests (#250)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-22T05:57:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a22135a2a7a31dc3593b2429f87274224597b46f",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] version 0.4.1",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-16T01:21:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ea8461dfd4ecd82e8ff6a3a1e5ef61e7c206063",
          "body": null,
          "is_bot": false,
          "headline": "[meta] prepare release",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-16T01:21:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f2634a9cd892408203611d70640b27741f51b20",
          "body": "Spotted this during an automated review.",
          "is_bot": false,
          "headline": "fix logic bug in TriHashMap::remove_unique (#248)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-16T01:19:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "317a591eaac8b1a1c6f967c02350c714ae437da7",
          "body": null,
          "is_bot": false,
          "headline": "factor out ItemSlotsPtr and slot-view primitives (#247)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-11T01:24:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47545d067597c7da25590a3e015a30305d513a17",
          "body": null,
          "is_bot": false,
          "headline": "add release link to changelog",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-04T21:44:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c61ad06e3571af996fd92c9e65e92573ca118a32",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] version 0.4.0",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-04T21:43:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98dd56fbde26a41aae5b64c861be1b0a15f42497",
          "body": null,
          "is_bot": false,
          "headline": "[meta] prepare release",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-04T21:43:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "644b95a1cb5f2f16d2f303dad8968c69ea181edc",
          "body": null,
          "is_bot": false,
          "headline": "add more tests for pathological implementations (#245)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-04T21:22:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fc0d19ee449fb9a9381ef2bf8aad097786f309c",
          "body": "The motivation is that a vec is significantly more efficient than a hash table\nat storing compact and compact-ish integer keys, as the benchmark data below\nshows.\n\nWe use a slot-based implementation, i.e. `Vec<ItemSlot<T>>`, where\n`ItemSlot<T>` is an enum with `Occupied(T)` and `Vacant { next: ItemI\n[…]\nast as before, and significantly more\ncompetitive with the std maps, including being faster at a few things\nlike bulk insert and iteration. (As a bonus, we also get to drop the\nrustc-hash dependency.)",
          "is_bot": false,
          "headline": "[2/n] use a slot-based impl for ItemSet (#243)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-04T20:46:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fcb621b39aa6e18a9d7a470faab59af8e84cb2f3",
          "body": "Required for cargo-sync-rdme 0.5.0.",
          "is_bot": false,
          "headline": "update cargo-sync-rdme nightly to 2026-04-30 (#244)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-04T20:28:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "337cd25319f14af03d87c4b6df91a8de197b1e83",
          "body": "Preparation for upcoming work to switch to a slab implementation. u32 is\nquite nice for cache density in practice, and most benchmarks get\nbetter. A few become worse due to `FxHasher` being slightly better with\n64-bit integers, though regressions completely vanish with the next\ncommit in the series \n[…]\n of items in the set, but that's a completely reasonable limit\nto have. We'll want to document this in the changelog, though.\n\nAlso use a newtype internally to ensure we aren't getting anything\nwrong.",
          "is_bot": false,
          "headline": "[1/n] use u32 for item indexes (#242)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-05-04T19:47:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b07c6c5626acc33edfea283834e28d2e4b147749",
          "body": "Extend the existing example-based tests into a set of proptests. This\nfound an issue in insert_overwrite that can be worked around for the\nsingle-key maps.",
          "is_bot": false,
          "headline": "[integration-tests] add proptests for panic safety (#241)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-27T18:58:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4fcb8f099fdd21881f2b8adac362a143a330840",
          "body": "This is not a memory-safety violation, but it is a useful property that\nwe can uphold without much work. Add tests, and then fix up the code to\nensure that the internal indexes are consistent.\n\nI've audited the other mutation code paths to ensure that they stay\nconsistent during panics.\n\nAlso mention that nextest is required to run tests.",
          "is_bot": false,
          "headline": "ensure panics during remove leave maps in a consistent state (#240)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-27T04:09:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2322b78545543230e9efa129ad1547866b202b31",
          "body": "…th SB+TB (#239)\n\nEnsure that iddqd's RefMut logic is sound under both Stacked and Tree\nBorrows.",
          "is_bot": false,
          "headline": "[integration-tests] add tests to trigger RefMut aliasing, run miri wi…",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-26T23:15:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20c7f6729c42574d6bf4488e734433d353b521a8",
          "body": "Add 1 KiB inline records, modeling a large (DB-row-sized) item stored by\nvalue in the map. This allows testing large memcpys on growing the map.",
          "is_bot": false,
          "headline": "[iddqd-benches] add benchmarks for large records (#238)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-26T05:53:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbd51fae034e8cf7489645edde8249427b526fd6",
          "body": "The existing batch sizes turned out to introduce a lot of variance in\nbenchmarks. Attempt to pick better ones.",
          "is_bot": false,
          "headline": "[iddqd-benches] improve BatchSize selection (#237)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-26T04:25:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47f3b9b3ce410bb4cd9ab3f6cd00d202cb9b45d6",
          "body": "More test coverage for methods.",
          "is_bot": false,
          "headline": "add extend to stateful proptests (#236)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-24T03:16:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad4ed0e4fb8abac79b8e9c72c7b06b4f4a9052a1",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] version 0.3.18",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-23T01:10:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6edd025aeacad33e3b632705e02163b0871a6917",
          "body": null,
          "is_bot": false,
          "headline": "prepare release",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-23T01:10:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5500c875e50e1feb2b157385cd42738503de2d5",
          "body": "Previously, MapHashTable::reserve, try_reserve, shrink_to_fit, and\nshrink_to all\ndelegated to hashbrown::HashTable with `|_| 0` as the rehash hasher.\nWhen the capacity change triggers a reallocation, hashbrown's rehash\npipeline (resize_inner / reserve_rehash_inner) calls the supplied hasher\nfor ever\n[…]\ne inserting.\n\nThe fix is to take a real hasher at the MapHashTable layer and plumb\n`|ix| state.hash_one(items[*ix].keyN())` through every caller.\n\nAlso add coverage for these methods to our proptests.",
          "is_bot": false,
          "headline": "pass a real rehash hasher to MapHashTable reserve / shrink (#235)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-23T01:06:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fd4f4e34f59fc3916d247e57c2a4755faa70e521",
          "body": "Add benchmarks for bulk_insert, churn, iter, shrink_to_fit, and a\nref_mut microbench alongside the existing get sweep.\n\nThese benches compile and run against the current HashMap-backed\nItemSet, establishing a baseline before any storage-layout changes.\nCriterion medians on a Ryzen 7950x:\n\n```\nget (p\n[…]\nsh      id_hash       id_ord\n   100    295.54 ns    643.52 ns    273.63 ns\n   10k     26.35 µs    348.79 µs     24.38 µs\n  100k    283.52 µs     36.03 ms    251.36 µs\n\nref_mut/id_ord_map: 13.76 ns\n```",
          "is_bot": false,
          "headline": "[iddqd-benches] expand benchmark suite (#234)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-22T23:10:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "34a837e8c659d28a781a02c711eb29747ec6aa64",
          "body": null,
          "is_bot": false,
          "headline": "regenerate readmes",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-19T07:43:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11c5588f1c4a462a7e924ac0d83385f010f3e004",
          "body": "Fixes rustdoc failure from:\n\n```\nerror[E0557]: feature has been removed\n --> /home/runner/.cargo/registry/src/index.crates.io-1949cf8c6b5b557f/daft-0.1.3/src/lib.rs:1:30\n  |\n1 | #![cfg_attr(doc_cfg, feature(doc_auto_cfg))]\n  |                              ^^^^^^^^^^^^ feature has been removed\n  |\n  = note: removed in 1.92.0; see <https://github.com/rust-lang/rust/pull/138907> for more information\n  = note: merged into `doc_cfg`\n```",
          "is_bot": false,
          "headline": "update daft to 0.1.5",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2026-04-19T07:39:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27307c21ab2554782af6bdc74ad1c5d6113294af",
          "body": null,
          "is_bot": false,
          "headline": "[iddqd] version 0.3.17",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2025-11-22T18:28:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c453a6d3a4fb44c4103091e34109462f7965d1db",
          "body": null,
          "is_bot": false,
          "headline": "[meta] prepare release",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2025-11-22T18:27:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00cdc9abb5296a52985c5ce9a095730aa24539c7",
          "body": "Realized that both item and items derived from the same &mut, which\nmeant that they were susceptible to potential unsoundness. Fixing this\nis just a matter of rearranging code so that items and item are awoken\nin separate blocks.\n\nThis wasn't flagged by miri, so it's possible it was fine -- but we\nshould fix it anyway.",
          "is_bot": false,
          "headline": "fix potential unsoundness in retain (#229)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2025-11-22T18:26:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf5d26e4499ad019cd8e8091ae1e7ac3aac3f9f5",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)\n| action | digest | [`8cd2ac2` ->\n`62da238`](https://redirect.github.com/taiki-e/install-action/compare/8cd2ac2...62da238)\n|\n\n[…]\nSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update taiki-e/install-action digest to 62da238 (#226)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2025-11-19T04:22:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "87f2c5f12629e8c8ede540a7e2dc2c54eec653bf",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [actions/checkout](https://redirect.github.com/actions/checkout) |\naction | patch | [`v5.0.0` ->\n`v5.0.1`](https://redirect.github.com/actions/checkout/compare/v5.0.0...v5.0.1)\n|\n\n---\n\n### Release Notes\n[…]\nSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update actions/checkout action to v5.0.1 (#225)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2025-11-18T05:21:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c53b9962d41a703f14d022fd37291591c8e7f023",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)\n| action | digest | [`537c30d` ->\n`8cd2ac2`](https://redirect.github.com/taiki-e/install-action/compare/537c30d...8cd2ac2)\n|\n\n[…]\nSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update taiki-e/install-action digest to 8cd2ac2 (#224)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2025-11-18T04:24:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11f3c4a5a35b76630b2f99c48e54ba5557c041ed",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n| [actions/checkout](https://redirect.github.com/actions/checkout) |\naction | digest | [`08c6903` ->\n`93cb6ef`](https://redirect.github.com/actions/checkout/compare/08c6903...93cb6ef)\n|\n\n---\n\n### Configur\n[…]\nSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update actions/checkout digest to 93cb6ef (#223)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2025-11-18T04:24:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "21fe5dd679625a5e974e942cb9395a09fa20a271",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)\n| action | digest | [`0be4756` ->\n`537c30d`](https://redirect.github.com/taiki-e/install-action/compare/0be4756...537c30d)\n|\n\n[…]\nSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update taiki-e/install-action digest to 537c30d (#222)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2025-11-17T04:24:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b32c62520d1ea04d4d22baea129eea7a4a8d9fb",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)\n| action | digest | [`6cc14f7` ->\n`0be4756`](https://redirect.github.com/taiki-e/install-action/compare/6cc14f7...0be4756)\n|\n\n[…]\nSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update taiki-e/install-action digest to 0be4756 (#221)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2025-11-14T04:25:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c338810897fae73159cc3fb2697e0282c243faa2",
          "body": "Add these methods that are useful for bulk inserts.",
          "is_bot": false,
          "headline": "add capacity-related methods to map types (#220)",
          "author_name": "Rain",
          "author_login": "sunshowers",
          "committed_at": "2025-11-13T01:09:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3884a4e85a656b677605dfa36692f51b1514e4f2",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)\n| action | digest | [`44c6d64` ->\n`6cc14f7`](https://redirect.github.com/taiki-e/install-action/compare/44c6d64...6cc14f7)\n|\n\n[…]\nSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update taiki-e/install-action digest to 6cc14f7 (#219)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2025-11-12T04:21:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f8fedb2fe605b1eb6da754b1200249dd7a846d65",
          "body": "This PR contains the following updates:\n\n| Package | Type | Update | Change |\n|---|---|---|---|\n|\n[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)\n| action | digest | [`e797ba6` ->\n`44c6d64`](https://redirect.github.com/taiki-e/install-action/compare/e797ba6...44c6d64)\n|\n\n[…]\nSIsInVwZGF0ZWRJblZlciI6IjQxLjE3My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->\n\nCo-authored-by: oxide-renovate[bot] <146848827+oxide-renovate[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "Update taiki-e/install-action digest to 44c6d64 (#218)",
          "author_name": "oxide-renovate[bot]",
          "author_login": "oxide-renovate[bot]",
          "committed_at": "2025-11-10T04:29:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 31,
      "commits_last_year": 229,
      "latest_release_at": "2026-07-21T22:31:33Z",
      "latest_release_tag": "iddqd-0.4.6",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 30,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 28.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "iddqd",
          "exists": true,
          "license": "MIT OR Apache-2.0",
          "keywords": [
            "hashmap",
            "bijective",
            "btreemap",
            "id_map",
            "iddqd",
            "data-structures",
            "no-std"
          ],
          "ecosystem": "crates",
          "matches_repo": true,
          "registry_url": "https://crates.io/crates/iddqd",
          "is_deprecated": false,
          "latest_version": "0.4.6",
          "repository_url": "https://github.com/oxidecomputer/iddqd",
          "versions_count": 31,
          "total_downloads": 4434428,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 546734,
          "first_published_at": "2025-05-21T19:54:33.509659Z",
          "latest_published_at": "2026-07-21T22:31:38.961471Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 12,
      "stars": 399,
      "watchers": 3,
      "fork_history": {
        "days": [
          {
            "date": "2025-05-22",
            "count": 1
          },
          {
            "date": "2025-05-27",
            "count": 2
          },
          {
            "date": "2025-05-30",
            "count": 1
          },
          {
            "date": "2025-06-11",
            "count": 1
          },
          {
            "date": "2025-10-06",
            "count": 1
          },
          {
            "date": "2025-11-14",
            "count": 1
          },
          {
            "date": "2026-01-29",
            "count": 1
          },
          {
            "date": "2026-05-07",
            "count": 1
          },
          {
            "date": "2026-06-04",
            "count": 1
          },
          {
            "date": "2026-07-16",
            "count": 2
          }
        ],
        "complete": true,
        "collected": 12,
        "total_forks": 12
      },
      "star_history": null,
      "open_issues_and_prs": 27
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Justfile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "Cargo.toml",
        "crates/iddqd-benches/Cargo.toml",
        "crates/iddqd-extended-examples/Cargo.toml",
        "crates/iddqd-soteria-runner/Cargo.toml",
        "crates/iddqd-test-utils/Cargo.toml",
        "crates/iddqd/Cargo.toml"
      ],
      "largest_source_bytes": 101679,
      "source_files_sampled": 109,
      "oversized_source_files": 3,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "crossbeam-epoch",
            "direct": false,
            "version": "0.9.18",
            "severity": "unknown",
            "ecosystem": "crates",
            "cvss_score": null,
            "advisory_ids": [
              "RUSTSEC-2026-0204"
            ],
            "fixed_version": "0.9.20",
            "advisory_count": 1,
            "oldest_advisory_days": 16
          },
          {
            "name": "paste",
            "direct": false,
            "version": "1.0.15",
            "severity": "unknown",
            "ecosystem": "crates",
            "cvss_score": null,
            "advisory_ids": [
              "RUSTSEC-2024-0436"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 653
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 2
        },
        "advisory_count": 2,
        "affected_count": 2,
        "assessed_count": 180,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates"
      ],
      "dependencies": [
        {
          "name": "criterion",
          "manifest": "crates/iddqd-benches/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "foldhash",
          "manifest": "crates/iddqd-benches/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "iddqd",
          "manifest": "crates/iddqd-benches/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "iddqd-test-utils",
          "manifest": "crates/iddqd-benches/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "allocator-api2",
          "manifest": "crates/iddqd-test-utils/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "bumpalo",
          "manifest": "crates/iddqd-test-utils/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "camino",
          "manifest": "crates/iddqd-test-utils/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "equivalent",
          "manifest": "crates/iddqd-test-utils/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "hugealloc",
          "manifest": "crates/iddqd-test-utils/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "iddqd",
          "manifest": "crates/iddqd-test-utils/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "proptest",
          "manifest": "crates/iddqd-test-utils/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/iddqd-test-utils/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/iddqd-test-utils/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "test-strategy",
          "manifest": "crates/iddqd-test-utils/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "allocator-api2",
          "manifest": "crates/iddqd/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "daft",
          "manifest": "crates/iddqd/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "equivalent",
          "manifest": "crates/iddqd/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "foldhash",
          "manifest": "crates/iddqd/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "hashbrown",
          "manifest": "crates/iddqd/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "ref-cast",
          "manifest": "crates/iddqd/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "schemars",
          "manifest": "crates/iddqd/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_core",
          "manifest": "crates/iddqd/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/iddqd/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "proptest",
          "manifest": "crates/iddqd/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "allocator-api2",
            "direct": true,
            "version": "0.2.21",
            "ecosystem": "crates"
          },
          {
            "name": "bumpalo",
            "direct": true,
            "version": "3.19.0",
            "ecosystem": "crates"
          },
          {
            "name": "camino",
            "direct": true,
            "version": "1.2.4",
            "ecosystem": "crates"
          },
          {
            "name": "criterion",
            "direct": true,
            "version": "0.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "daft",
            "direct": true,
            "version": "0.1.5",
            "ecosystem": "crates"
          },
          {
            "name": "equivalent",
            "direct": true,
            "version": "1.0.2",
            "ecosystem": "crates"
          },
          {
            "name": "foldhash",
            "direct": true,
            "version": "0.1.5",
            "ecosystem": "crates"
          },
          {
            "name": "foldhash",
            "direct": true,
            "version": "0.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "hashbrown",
            "direct": true,
            "version": "0.12.3",
            "ecosystem": "crates"
          },
          {
            "name": "hashbrown",
            "direct": true,
            "version": "0.15.4",
            "ecosystem": "crates"
          },
          {
            "name": "hashbrown",
            "direct": true,
            "version": "0.17.1",
            "ecosystem": "crates"
          },
          {
            "name": "hugealloc",
            "direct": true,
            "version": "0.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "proptest",
            "direct": true,
            "version": "1.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "ref-cast",
            "direct": true,
            "version": "1.0.25",
            "ecosystem": "crates"
          },
          {
            "name": "schemars",
            "direct": true,
            "version": "0.8.22",
            "ecosystem": "crates"
          },
          {
            "name": "serde",
            "direct": true,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_core",
            "direct": true,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_json",
            "direct": true,
            "version": "1.0.145",
            "ecosystem": "crates"
          },
          {
            "name": "test-strategy",
            "direct": true,
            "version": "0.4.3",
            "ecosystem": "crates"
          },
          {
            "name": "adler2",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "aho-corasick",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "crates"
          },
          {
            "name": "anes",
            "direct": false,
            "version": "0.1.6",
            "ecosystem": "crates"
          },
          {
            "name": "anstream",
            "direct": false,
            "version": "0.6.21",
            "ecosystem": "crates"
          },
          {
            "name": "anstyle",
            "direct": false,
            "version": "1.0.11",
            "ecosystem": "crates"
          },
          {
            "name": "anstyle-parse",
            "direct": false,
            "version": "0.2.7",
            "ecosystem": "crates"
          },
          {
            "name": "anstyle-query",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "crates"
          },
          {
            "name": "anstyle-wincon",
            "direct": false,
            "version": "3.0.11",
            "ecosystem": "crates"
          },
          {
            "name": "atomicwrites",
            "direct": false,
            "version": "0.4.4",
            "ecosystem": "crates"
          },
          {
            "name": "autocfg",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "bitflags",
            "direct": false,
            "version": "2.9.1",
            "ecosystem": "crates"
          },
          {
            "name": "cast",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "cbindgen",
            "direct": false,
            "version": "0.29.4",
            "ecosystem": "crates"
          },
          {
            "name": "cfg-if",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "crates"
          },
          {
            "name": "chacha20",
            "direct": false,
            "version": "0.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "ciborium",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "ciborium-io",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "ciborium-ll",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "clap",
            "direct": false,
            "version": "4.5.43",
            "ecosystem": "crates"
          },
          {
            "name": "clap_builder",
            "direct": false,
            "version": "4.5.43",
            "ecosystem": "crates"
          },
          {
            "name": "clap_lex",
            "direct": false,
            "version": "0.7.5",
            "ecosystem": "crates"
          },
          {
            "name": "colorchoice",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "crates"
          },
          {
            "name": "console",
            "direct": false,
            "version": "0.15.11",
            "ecosystem": "crates"
          },
          {
            "name": "cpufeatures",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "crc32fast",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "criterion-plot",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "crates"
          },
          {
            "name": "crossbeam-deque",
            "direct": false,
            "version": "0.8.6",
            "ecosystem": "crates"
          },
          {
            "name": "crossbeam-epoch",
            "direct": false,
            "version": "0.9.18",
            "ecosystem": "crates"
          },
          {
            "name": "crossbeam-utils",
            "direct": false,
            "version": "0.8.21",
            "ecosystem": "crates"
          },
          {
            "name": "crunchy",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "crates"
          },
          {
            "name": "dashu-base",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "crates"
          },
          {
            "name": "dashu-int",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "crates"
          },
          {
            "name": "derive-ex",
            "direct": false,
            "version": "0.1.8",
            "ecosystem": "crates"
          },
          {
            "name": "dyn-clone",
            "direct": false,
            "version": "1.0.19",
            "ecosystem": "crates"
          },
          {
            "name": "either",
            "direct": false,
            "version": "1.15.0",
            "ecosystem": "crates"
          },
          {
            "name": "encode_unicode",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "errno",
            "direct": false,
            "version": "0.3.13",
            "ecosystem": "crates"
          },
          {
            "name": "expectorate",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "fastrand",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.3.3",
            "ecosystem": "crates"
          },
          {
            "name": "getrandom",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "crates"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "0.3.3",
            "ecosystem": "crates"
          },
          {
            "name": "half",
            "direct": false,
            "version": "2.6.0",
            "ecosystem": "crates"
          },
          {
            "name": "heck",
            "direct": false,
            "version": "0.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "hegeltest",
            "direct": false,
            "version": "0.23.1",
            "ecosystem": "crates"
          },
          {
            "name": "hegeltest-c",
            "direct": false,
            "version": "0.23.1",
            "ecosystem": "crates"
          },
          {
            "name": "hegeltest-macros",
            "direct": false,
            "version": "0.23.1",
            "ecosystem": "crates"
          },
          {
            "name": "indexmap",
            "direct": false,
            "version": "1.9.3",
            "ecosystem": "crates"
          },
          {
            "name": "indexmap",
            "direct": false,
            "version": "2.14.0",
            "ecosystem": "crates"
          },
          {
            "name": "is_terminal_polyfill",
            "direct": false,
            "version": "1.70.2",
            "ecosystem": "crates"
          },
          {
            "name": "itertools",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "crates"
          },
          {
            "name": "itoa",
            "direct": false,
            "version": "1.0.15",
            "ecosystem": "crates"
          },
          {
            "name": "js-sys",
            "direct": false,
            "version": "0.3.77",
            "ecosystem": "crates"
          },
          {
            "name": "lazy_static",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "libc",
            "direct": false,
            "version": "0.2.174",
            "ecosystem": "crates"
          },
          {
            "name": "linux-raw-sys",
            "direct": false,
            "version": "0.4.15",
            "ecosystem": "crates"
          },
          {
            "name": "linux-raw-sys",
            "direct": false,
            "version": "0.9.4",
            "ecosystem": "crates"
          },
          {
            "name": "lock_api",
            "direct": false,
            "version": "0.4.14",
            "ecosystem": "crates"
          },
          {
            "name": "log",
            "direct": false,
            "version": "0.4.27",
            "ecosystem": "crates"
          },
          {
            "name": "memchr",
            "direct": false,
            "version": "2.7.4",
            "ecosystem": "crates"
          },
          {
            "name": "miniz_oxide",
            "direct": false,
            "version": "0.8.9",
            "ecosystem": "crates"
          },
          {
            "name": "newline-converter",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "num-modular",
            "direct": false,
            "version": "0.6.4",
            "ecosystem": "crates"
          },
          {
            "name": "num-traits",
            "direct": false,
            "version": "0.2.19",
            "ecosystem": "crates"
          },
          {
            "name": "once_cell",
            "direct": false,
            "version": "1.21.3",
            "ecosystem": "crates"
          },
          {
            "name": "once_cell_polyfill",
            "direct": false,
            "version": "1.70.2",
            "ecosystem": "crates"
          },
          {
            "name": "oorandom",
            "direct": false,
            "version": "11.1.5",
            "ecosystem": "crates"
          },
          {
            "name": "parking_lot",
            "direct": false,
            "version": "0.12.5",
            "ecosystem": "crates"
          },
          {
            "name": "parking_lot_core",
            "direct": false,
            "version": "0.9.12",
            "ecosystem": "crates"
          },
          {
            "name": "paste",
            "direct": false,
            "version": "1.0.15",
            "ecosystem": "crates"
          },
          {
            "name": "plotters",
            "direct": false,
            "version": "0.3.7",
            "ecosystem": "crates"
          },
          {
            "name": "plotters-backend",
            "direct": false,
            "version": "0.3.7",
            "ecosystem": "crates"
          },
          {
            "name": "plotters-svg",
            "direct": false,
            "version": "0.3.7",
            "ecosystem": "crates"
          },
          {
            "name": "ppv-lite86",
            "direct": false,
            "version": "0.2.21",
            "ecosystem": "crates"
          },
          {
            "name": "proc-macro2",
            "direct": false,
            "version": "1.0.95",
            "ecosystem": "crates"
          },
          {
            "name": "quote",
            "direct": false,
            "version": "1.0.40",
            "ecosystem": "crates"
          },
          {
            "name": "r-efi",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "r-efi",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand",
            "direct": false,
            "version": "0.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "rand",
            "direct": false,
            "version": "0.9.4",
            "ecosystem": "crates"
          },
          {
            "name": "rand_chacha",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "crates"
          },
          {
            "name": "rand_core",
            "direct": false,
            "version": "0.10.1",
            "ecosystem": "crates"
          },
          {
            "name": "rand_core",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "crates"
          },
          {
            "name": "rand_xorshift",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "crates"
          },
          {
            "name": "rayon",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "crates"
          },
          {
            "name": "rayon-core",
            "direct": false,
            "version": "1.12.1",
            "ecosystem": "crates"
          },
          {
            "name": "redox_syscall",
            "direct": false,
            "version": "0.5.18",
            "ecosystem": "crates"
          },
          {
            "name": "ref-cast-impl",
            "direct": false,
            "version": "1.0.25",
            "ecosystem": "crates"
          },
          {
            "name": "regex",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "crates"
          },
          {
            "name": "regex-automata",
            "direct": false,
            "version": "0.4.9",
            "ecosystem": "crates"
          },
          {
            "name": "regex-syntax",
            "direct": false,
            "version": "0.8.5",
            "ecosystem": "crates"
          },
          {
            "name": "regress",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "crates"
          },
          {
            "name": "rustc-hash",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "crates"
          },
          {
            "name": "rustix",
            "direct": false,
            "version": "0.38.44",
            "ecosystem": "crates"
          },
          {
            "name": "rustix",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "crates"
          },
          {
            "name": "rustversion",
            "direct": false,
            "version": "1.0.21",
            "ecosystem": "crates"
          },
          {
            "name": "ryu",
            "direct": false,
            "version": "1.0.20",
            "ecosystem": "crates"
          },
          {
            "name": "same-file",
            "direct": false,
            "version": "1.0.6",
            "ecosystem": "crates"
          },
          {
            "name": "schemars_derive",
            "direct": false,
            "version": "0.8.22",
            "ecosystem": "crates"
          },
          {
            "name": "scopeguard",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "1.0.26",
            "ecosystem": "crates"
          },
          {
            "name": "serde_derive",
            "direct": false,
            "version": "1.0.228",
            "ecosystem": "crates"
          },
          {
            "name": "serde_derive_internals",
            "direct": false,
            "version": "0.29.1",
            "ecosystem": "crates"
          },
          {
            "name": "serde_spanned",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "crates"
          },
          {
            "name": "serde_tokenstream",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "similar",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "crates"
          },
          {
            "name": "smallvec",
            "direct": false,
            "version": "1.15.2",
            "ecosystem": "crates"
          },
          {
            "name": "sptr",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "crates"
          },
          {
            "name": "static_assertions",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "strsim",
            "direct": false,
            "version": "0.11.1",
            "ecosystem": "crates"
          },
          {
            "name": "structmeta",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "structmeta-derive",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "crates"
          },
          {
            "name": "syn",
            "direct": false,
            "version": "2.0.104",
            "ecosystem": "crates"
          },
          {
            "name": "target-triple",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "crates"
          },
          {
            "name": "tempfile",
            "direct": false,
            "version": "3.20.0",
            "ecosystem": "crates"
          },
          {
            "name": "termcolor",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "crates"
          },
          {
            "name": "thiserror",
            "direct": false,
            "version": "2.0.12",
            "ecosystem": "crates"
          },
          {
            "name": "thiserror-impl",
            "direct": false,
            "version": "2.0.12",
            "ecosystem": "crates"
          },
          {
            "name": "tinytemplate",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "toml",
            "direct": false,
            "version": "0.9.12+spec-1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "toml",
            "direct": false,
            "version": "1.1.2+spec-1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "toml_datetime",
            "direct": false,
            "version": "0.7.5+spec-1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "toml_datetime",
            "direct": false,
            "version": "1.1.1+spec-1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "toml_parser",
            "direct": false,
            "version": "1.1.2+spec-1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "toml_writer",
            "direct": false,
            "version": "1.1.1+spec-1.1.0",
            "ecosystem": "crates"
          },
          {
            "name": "trybuild",
            "direct": false,
            "version": "1.0.116",
            "ecosystem": "crates"
          },
          {
            "name": "typify",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "typify-impl",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "typify-macro",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "crates"
          },
          {
            "name": "unarray",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-ident",
            "direct": false,
            "version": "1.0.18",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-segmentation",
            "direct": false,
            "version": "1.12.0",
            "ecosystem": "crates"
          },
          {
            "name": "unicode-width",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "crates"
          },
          {
            "name": "utf8parse",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "crates"
          },
          {
            "name": "walkdir",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "crates"
          },
          {
            "name": "wasi",
            "direct": false,
            "version": "0.14.2+wasi-0.2.4",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen",
            "direct": false,
            "version": "0.2.100",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-backend",
            "direct": false,
            "version": "0.2.100",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-macro",
            "direct": false,
            "version": "0.2.100",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-macro-support",
            "direct": false,
            "version": "0.2.100",
            "ecosystem": "crates"
          },
          {
            "name": "wasm-bindgen-shared",
            "direct": false,
            "version": "0.2.100",
            "ecosystem": "crates"
          },
          {
            "name": "web-sys",
            "direct": false,
            "version": "0.3.77",
            "ecosystem": "crates"
          },
          {
            "name": "winapi-util",
            "direct": false,
            "version": "0.1.9",
            "ecosystem": "crates"
          },
          {
            "name": "windows-link",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.52.0",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.59.0",
            "ecosystem": "crates"
          },
          {
            "name": "windows-sys",
            "direct": false,
            "version": "0.61.2",
            "ecosystem": "crates"
          },
          {
            "name": "windows-targets",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_aarch64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_i686_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnu",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_gnullvm",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "windows_x86_64_msvc",
            "direct": false,
            "version": "0.52.6",
            "ecosystem": "crates"
          },
          {
            "name": "winnow",
            "direct": false,
            "version": "0.7.15",
            "ecosystem": "crates"
          },
          {
            "name": "winnow",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "crates"
          },
          {
            "name": "wit-bindgen-rt",
            "direct": false,
            "version": "0.39.0",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy",
            "direct": false,
            "version": "0.8.26",
            "ecosystem": "crates"
          },
          {
            "name": "zerocopy-derive",
            "direct": false,
            "version": "0.8.26",
            "ecosystem": "crates"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 180,
        "direct_count": 19,
        "indirect_count": 161
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 17,
        "merged_prs": 258,
        "open_issues": 10,
        "closed_ratio": 0.524,
        "closed_issues": 11,
        "closed_unmerged_prs": 11
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "sunshowers",
          "commits": 311,
          "avatar_url": "https://avatars.githubusercontent.com/u/180618?v=4"
        },
        {
          "type": "User",
          "login": "aatifsyed",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/38045910?v=4"
        },
        {
          "type": "User",
          "login": "izuzak",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/38924?v=4"
        },
        {
          "type": "User",
          "login": "Sh3Rm4n",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/29653149?v=4"
        },
        {
          "type": "User",
          "login": "SG-devel",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/78623477?v=4"
        }
      ],
      "contributors_sampled": 5,
      "top_contributor_share": 0.981
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Cargo.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 3,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 1,
            "reason": "Found 3/25 approved changesets -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 3 contributing companies or organizations -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "9ece0e9b4379ab34ab6aee44bd45e91ca59f15f7",
        "ran_at": "2026-07-22T19:01:34Z",
        "aggregate_score": 5.5,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-21T22:31:44Z",
      "oldest_open_prs": [
        {
          "number": 16,
          "created_at": "2025-05-24T00:18:00Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 34,
          "created_at": "2025-05-30T17:31:10Z",
          "last_comment_at": "2025-05-30T23:25:42Z",
          "last_comment_author": "gmorenz"
        },
        {
          "number": 36,
          "created_at": "2025-06-01T20:06:23Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 54,
          "created_at": "2025-06-16T07:05:07Z",
          "last_comment_at": "2026-05-07T20:08:23Z",
          "last_comment_author": "oxide-renovate"
        },
        {
          "number": 126,
          "created_at": "2025-08-16T03:21:26Z",
          "last_comment_at": "2026-05-07T20:08:20Z",
          "last_comment_author": "oxide-renovate"
        },
        {
          "number": 142,
          "created_at": "2025-09-09T03:26:43Z",
          "last_comment_at": "2026-05-07T20:08:17Z",
          "last_comment_author": "oxide-renovate"
        },
        {
          "number": 158,
          "created_at": "2025-09-18T06:55:44Z",
          "last_comment_at": "2026-05-07T20:08:21Z",
          "last_comment_author": "oxide-renovate"
        },
        {
          "number": 159,
          "created_at": "2025-09-18T14:44:06Z",
          "last_comment_at": "2025-10-07T03:52:46Z",
          "last_comment_author": "sunshowers"
        },
        {
          "number": 162,
          "created_at": "2025-09-21T03:17:06Z",
          "last_comment_at": "2026-05-07T20:08:19Z",
          "last_comment_author": "oxide-renovate"
        },
        {
          "number": 233,
          "created_at": "2026-04-19T10:08:32Z",
          "last_comment_at": "2026-05-07T20:08:14Z",
          "last_comment_author": "oxide-renovate"
        },
        {
          "number": 246,
          "created_at": "2026-05-07T10:07:08Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 289,
          "created_at": "2026-06-19T08:20:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 290,
          "created_at": "2026-06-21T00:22:10Z",
          "last_comment_at": "2026-06-28T21:32:04Z",
          "last_comment_author": "SG-devel"
        },
        {
          "number": 295,
          "created_at": "2026-07-09T02:34:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 297,
          "created_at": "2026-07-09T04:31:36Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 298,
          "created_at": "2026-07-09T05:58:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 299,
          "created_at": "2026-07-09T05:59:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-21T22:27:40Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 5,
          "created_at": "2025-05-22T03:38:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 7,
          "created_at": "2025-05-22T07:26:16Z",
          "last_comment_at": "2026-06-09T20:42:48Z",
          "last_comment_author": "SG-devel"
        },
        {
          "number": 9,
          "created_at": "2025-05-22T12:09:25Z",
          "last_comment_at": "2025-05-22T19:38:57Z",
          "last_comment_author": "sunshowers"
        },
        {
          "number": 19,
          "created_at": "2025-05-24T21:20:35Z",
          "last_comment_at": "2026-06-02T21:25:01Z",
          "last_comment_author": "AaronKutch"
        },
        {
          "number": 33,
          "created_at": "2025-05-30T11:57:15Z",
          "last_comment_at": "2025-06-01T20:10:44Z",
          "last_comment_author": "sunshowers"
        },
        {
          "number": 41,
          "created_at": "2025-06-10T17:45:49Z",
          "last_comment_at": "2025-06-22T21:49:31Z",
          "last_comment_author": "jplatte"
        },
        {
          "number": 44,
          "created_at": "2025-06-13T18:30:33Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 185,
          "created_at": "2025-10-06T22:36:27Z",
          "last_comment_at": "2025-10-07T03:50:01Z",
          "last_comment_author": "sunshowers"
        },
        {
          "number": 249,
          "created_at": "2026-05-18T07:47:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 266,
          "created_at": "2026-06-02T19:51:24Z",
          "last_comment_at": "2026-06-16T18:09:01Z",
          "last_comment_author": "sunshowers"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/oxidecomputer/iddqd",
    "host": "github.com",
    "name": "iddqd",
    "owner": "oxidecomputer"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 71,
      "inputs": {
        "security": 64,
        "vitality": 91,
        "community": 63,
        "governance": 64,
        "engineering": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 91,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "excellent",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "commits_last_year": 229,
              "human_commit_share": 0.83,
              "days_since_last_push": 0,
              "active_weeks_last_year": 30
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "30/52 weeks with commits",
                "points": 20.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 30
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "229 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 229
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 31,
              "latest_release_tag": "iddqd-0.4.6",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 28.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "31 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 31
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~28.2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 28.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 63,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "forks": 12,
              "stars": 399,
              "watchers": 3,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "399 stars",
                "points": 42.2,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 399
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "12 forks",
                "points": 8.7,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "3 watchers",
                "points": 1.7,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "excellent",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 96,
            "inputs": {
              "packages": [
                "iddqd"
              ],
              "dependents": null,
              "ecosystems": "crates",
              "total_downloads": 4434428,
              "monthly_downloads": 546734
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "546,734 downloads/month across crates",
                "points": 76.5,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 546734,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 64,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 26,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 5,
              "top_contributor_share": 0.981
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 98% of commits",
                "points": 0.4,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 98
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "5 contributors",
                "points": 6.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 63,
            "inputs": {
              "merged_prs": 258,
              "open_issues": 10,
              "closed_issues": 11,
              "issue_closed_ratio": 0.524,
              "closed_unmerged_prs": 11
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "52% of issues closed",
                "points": 24.5,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 52
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "258/269 decided PRs merged",
                "points": 36.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 258,
                      "decided": 269
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 3/25 approved changesets -- score normalized to 1",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "followers": 2884,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "oxidecomputer",
              "public_repos": 403,
              "account_age_days": 2536
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "2,884 followers of oxidecomputer",
                "points": 24.9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 2884,
                      "login": "oxidecomputer"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "403 public repos, account ~6 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 403
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "iddqd"
              ],
              "ecosystems": "crates",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on crates",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "31 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 31
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "no-std",
                "rust",
                "rust-lang"
              ],
              "has_wiki": true,
              "homepage": "https://docs.rs/iddqd",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://docs.rs/iddqd",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "3 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 64,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 55,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 5.5
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 3/25 approved changesets -- score normalized to 1",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 180 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 180
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 2,
              "affected_packages": 2,
              "assessed_packages": 180,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 2",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 180,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 8
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 60,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 35,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.651,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "54 of 83 human commits state their intent (structured subject or explanatory body)",
                "points": 34.7,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 54,
                      "sampled": 83
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Cargo.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Justfile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "Cargo.toml",
                "crates/iddqd-benches/Cargo.toml",
                "crates/iddqd-extended-examples/Cargo.toml",
                "crates/iddqd-soteria-runner/Cargo.toml",
                "crates/iddqd-test-utils/Cargo.toml",
                "crates/iddqd/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0.01
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Justfile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Justfile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Rust (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "1 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 98,
            "inputs": {
              "primary_language": "Rust",
              "largest_source_bytes": 101679,
              "source_files_sampled": 109,
              "oversized_source_files": 3
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Rust (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "3/109 source files over 60KB",
                "points": 53.5,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 109,
                      "oversized": 3
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch crates package 'iddqd-benches' from its registry",
    "Could not fetch crates package 'iddqd-test-utils' from its registry",
    "Could not fetch crates package 'iddqd-soteria-runner' from its registry",
    "Could not fetch crates package 'iddqd-extended-examples' from its registry",
    "deps.dev does not index crates:iddqd@0.4.6; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T19:01:50.646575Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/oxidecomputer/iddqd.svg",
  "full_name": "oxidecomputer/iddqd",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics — crates.io.

Software health index

Score profile

Ownership

Package ecosystems

Metrics by category

Key facts

Data collection warnings

More detail

Related records