pierrec/lz4 holds a health index of 60 out of 100, placing it in the Moderate band. It scores highest on Sustainability & Governance (68/100) and lowest on Security (47/100). It was last updated 58 days ago. A single contributor accounts for most of its recent work.
60
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
60
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — no direct dependency carries a known advisory
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
12
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 12 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 0/36 source files over 60KB
Inputs used
primary_language
Go
largest_source_bytes
12,487
source_files_sampled
36
oversized_source_files
0
Key facts
967GitHub stars
37contributors
22commits, last 12 months
58days since last push
3releases
1bus factor
21open issues
Gopackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 152 ⇿
0Stars
152Forks
3Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 3
Each point covers 11 days.
OpenSSF Scorecard 3.4 / 10
3.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-28 13:28 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 12 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Go
code.cloudfoundry.org/bytefmt
0.0.0-20231017140541-3b893ed0421b
indirect
Go
github.com/dvyukov/go-fuzz
0.0.0-20201115201419-0701ec3cea76
indirect
Go
github.com/elazarl/go-bindata-assetfs
1.0.1
indirect
Go
github.com/mattn/go-runewidth
0.0.15
indirect
Go
github.com/pierrec/cmdflag
0.0.2
indirect
Go
github.com/pierrec/lz4/v4
4.0.0-00010101000000-000000000000
indirect
Go
github.com/pierrec/lz4/v4
4.1.19
indirect
Go
github.com/rivo/uniseg
0.4.4
indirect
Go
github.com/schollz/progressbar/v3
3.14.1
indirect
Go
github.com/stephens2424/writerset
1.0.2
indirect
Go
golang.org/x/term
0.15.0
indirect
Go
golang.org/x/tools
0.0.0-20201116002733-ac45abd4c88c
indirect
Dependency advisories 0
This repository publishes no package the index resolves, so its own dependency graph was assessed — 12 packages, which also include development and test pins that never ship: 0 carry known advisories, of which 0 are direct.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"go",
"golang",
"lz4",
"lz4-frame"
],
"is_fork": false,
"size_kb": 68857,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 142187,
"Assembly": 30439
},
"pushed_at": "2026-05-31T08:26:53Z",
"created_at": "2015-03-14T17:21:06Z",
"owner_type": "User",
"updated_at": "2026-07-28T12:56:26Z",
"description": "LZ4 compression and decompression in pure Go",
"is_archived": false,
"is_disabled": false,
"license_spdx": "BSD-3-Clause",
"default_branch": "v4",
"license_spdx_raw": "BSD-3-Clause",
"primary_language": "Go",
"significant_languages": [
"Go",
"Assembly"
]
},
"owner": {
"blog": null,
"name": "Pierre Curto",
"type": "User",
"login": "pierrec",
"company": null,
"location": "Paris (France)",
"followers": 80,
"avatar_url": "https://avatars.githubusercontent.com/u/368228?v=4",
"created_at": "2010-08-18T09:15:08Z",
"is_verified": null,
"public_repos": 49,
"account_age_days": 5823
},
"license": {
"state": "standard",
"spdx_id": "BSD-3-Clause",
"raw_spdx": "BSD-3-Clause",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v4.1.27",
"kind": "patch",
"published_at": "2026-05-31T08:31:30Z"
},
{
"tag": "v4.1.26",
"kind": "patch",
"published_at": "2026-03-06T08:37:10Z"
},
{
"tag": "v4.1.23",
"kind": "patch",
"published_at": "2025-12-17T16:01:17Z"
}
],
"recent_commits": [
{
"oid": "a296161b6e73e177e902d9cdafbd3e8b9ffaa68f",
"body": "arm64: major decodeBlock performance rework",
"is_bot": false,
"headline": "Merge pull request #243 from honeycombio/lizf.arm64-shortcut",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2026-05-31T08:22:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17a7cd8306b892532c1668af771cbb54d14b9324",
"body": "set err to nil after ReadFull returns io.EOF",
"is_bot": false,
"headline": "Merge pull request #245 from serprex/fix-read-eof-regression",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2026-05-31T08:22:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9333c3061d3ab75b01271fa1a9a0ba076b17f02",
"body": "When source size is multiple of block size, final io.ReadFull returns (0, io.EOF)\n`err` only cleared by `w.write` when `rn > 0`\n\nThis broke io.Copy which uses dst.(io.ReaderFrom) shortcut,\npropagating io.EOF to caller",
"is_bot": false,
"headline": "set err to nil after ReadFull returns io.EOF",
"author_name": "Philip Dubé",
"author_login": "serprex",
"committed_at": "2026-04-29T13:33:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "903773a82fcb0e520f20e05233a7ec445c413d13",
"body": null,
"is_bot": false,
"headline": "Merge branch 'v4' into lizf.arm64-shortcut",
"author_name": "Liz Fong-Jones",
"author_login": "lizthegrey",
"committed_at": "2026-04-23T17:56:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f2b6bbaaeb58484f47106b334d836955084135e",
"body": "ci: refresh Go matrix to 1.24-1.26 and bump actions",
"is_bot": false,
"headline": "Merge pull request #244 from honeycombio/lizf.ci-refresh",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2026-04-23T07:02:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91e8b6facb72b4265b93aa5b537f54accca0af19",
"body": "For match copies where offset >= len (non-overlapping) and len >= 256\nbytes, jump out of the inline LDP/STP loop and into runtime·memmove.\nGo's arm64 memmove is hand-tuned NEON (128-bit reads/writes, prefetch,\nsoftware-pipelined 64 B/iter) and outruns any scalar loop we can\nrealistically write inlin\n[…]\numnar data shows ~56% of total match-copy bytes\ncome from matches of length >= 256, and essentially all of those\nhave offset >> len, so this path fires on the majority of real-world\nlong-match output.",
"is_bot": false,
"headline": "arm64: call runtime·memmove for long, non-overlapping match copies",
"author_name": "Liz Fong-Jones",
"author_login": "lizthegrey",
"committed_at": "2026-04-21T16:18:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0894170a60ac9fa12d1e4bf18ae85dca3756e131",
"body": "copyMatchLoop8 has carried a comment claiming \"a 16-at-a-time loop\ndoesn't provide a further speedup\". On columnar / record-oriented\ncompressed data that comment is no longer accurate: measurements show\nlong matches (actual match length >= 19, ~9% of matches by count) emit\n~75% of total match-copy b\n[…]\ntly\ntruncates a larger immediate (e.g. $32 -> $0), which produces a loop\nentered on any offset >= 0 and corrupts output. The entry condition\nuses CCMP offset, $31 + BLS so the encoding stays in range.",
"is_bot": false,
"headline": "arm64: widen copyMatchLoop8 to 16 bytes/iter for offset >= 32",
"author_name": "Liz Fong-Jones",
"author_login": "lizthegrey",
"committed_at": "2026-04-21T16:18:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f6dea622362f2df28ed6f90512218625d20cbaf4",
"body": "The shortcut's 18-byte match copy has been sequenced as three\nback-to-back 8+8+2 memory ops so that the RLE cycling case for\noffset 8..15 loads data that prior stores just produced. That\nsequencing is only required when offset < 18 -- any larger offset\nguarantees no overlap between the 16-byte LDP a\n[…]\n)\n\nNo statistically significant regressions. Wins concentrate on\nnon-RLE workloads as expected: RLE1/2 don't take the shortcut path\n(offset 1/2 splat is used instead), so they see only layout effects.",
"is_bot": false,
"headline": "arm64: LDP/STP fast path for shortcut match copy when offset >= 18",
"author_name": "Liz Fong-Jones",
"author_login": "lizthegrey",
"committed_at": "2026-04-21T03:26:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4ce77f3d22808a7ce55ca1ccf50eb20851b29821",
"body": "The splat loop for offset 1/2 RLE matches was storing 8 bytes per\niteration. Every arm64 core we target (Graviton2/3/4/5, Apple\nM2/M3/M4) can retire an STP of two X-registers as a single 16-byte\nstore, so writing `STP (tmp3, tmp3), 16(dst)!` per iteration halves\nthe iteration count and the per-itera\n[…]\n\n BenchmarkUncompressRLE2 30530 MB/s -> 57920 MB/s (1.90x, offset=2)\n\nAll non-RLE benchmarks (Pg1661, Twain, Digits, Rand, RLE3, RLE4)\nare unchanged within noise: they don't exercise the splat path.",
"is_bot": false,
"headline": "arm64: widen splat store from 8 to 16 bytes per iter",
"author_name": "Liz Fong-Jones",
"author_login": "lizthegrey",
"committed_at": "2026-04-21T02:38:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5f0a64122bc561e9cf80c0c6327339ce0cbf795f",
"body": "Go 1.19-1.21 are all end-of-life (1.21 went EOL in Feb 2024 when\n1.23 shipped). The current maintained Go versions are 1.25 and\n1.26; keeping 1.24 gives one EOL generation of headroom for\ndownstream consumers that haven't migrated yet.\n\nAlso bumps actions/checkout v2 -> v4 and actions/setup-go v2 ->\n[…]\n was disabled across all GitHub\nActions in 2024, so the current CI matrix has been failing to\nlaunch (not just the jobs themselves). v4 / v5 use Node 20.\n\nNo source changes; this is a CI-only refresh.",
"is_bot": false,
"headline": "ci: refresh Go matrix to 1.24-1.26 and bump actions",
"author_name": "Liz Fong-Jones",
"author_login": "lizthegrey",
"committed_at": "2026-04-21T02:19:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "998937e68150031faaa24696b29bb79fb55a4a9c",
"body": "Small-offset matches with offset 1 (byte RLE) or offset 2 (halfword\nRLE) previously went through a byte-at-a-time loop that on modern\narm64 cores is bottlenecked by store-to-load forwarding latency.\nWhen len >= 8 and offset is 1 or 2, splat the 1- or 2-byte pattern\nacross a 64-bit register and emit \n[…]\nssRLE4 1690 MB/s -> 1550 MB/s (noise)\n\nNon-RLE benchmarks (Pg1661, Twain, Digits, Rand) are unchanged\nwithin noise: the one added branch (CMP $8, len; BLO) is predicted\naway on non-RLE match paths.",
"is_bot": false,
"headline": "arm64: splat fast path for offset 1 and 2 in copyMatchLoop1",
"author_name": "Liz Fong-Jones",
"author_login": "lizthegrey",
"committed_at": "2026-04-21T01:59:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "41139b443e32eedf8e82e36fb7728c2dca2e0b54",
"body": "Ports the \"copy shortcut\" optimization from decode_amd64.s to\ndecode_arm64.s: when literal length is 0..14, there is at least\n32 bytes of dst and 16 bytes of src remaining, the match offset is\nat least 8, the match is within the current block (not dict), and\nthe match length is not extended, copy 16\n[…]\ns (+81%)\n Digits 4560 MB/s -> 4920 MB/s (+8%)\n Rand 9260 MB/s -> 9270 MB/s (flat, all-literal path unchanged)\n\nAdds one register (R20, dstend32 = dstend - 32) used only by the\nshortcut guard.",
"is_bot": false,
"headline": "arm64: add copy shortcut fast path",
"author_name": "Liz Fong-Jones",
"author_login": "lizthegrey",
"committed_at": "2026-04-21T01:12:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "60ed180f469c3090aa5453e33043a96f02e790a5",
"body": null,
"is_bot": false,
"headline": "remove failing test as its test file is unavailable (too large).",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2026-03-06T08:33:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "feb996bd667464756d6284de01fcb1c5d79f04b3",
"body": "Fix Reader stale data, Writer buffer leak, and zero-length write",
"is_bot": false,
"headline": "Merge pull request #240 from lkinley-rythmos/v4",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2026-03-05T09:29:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dfa7723090a1d6ffaad08f43ea864782b9fe1bd",
"body": "…ero-length write\n\n- TestReader_DirectModeStaleData: synthetic LZ4 frame with a zero-length\n uncompressed block verifies direct-mode r.data clearing\n- TestReader_BufferIssue: end-to-end test with bundle testdata\n- TestWriter_ResetWithoutClose: Reset without Close returns buffer to pool\n- TestWriter_ReadFromZeroLengthRead: zero-byte reads are skipped in ReadFrom\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add regression tests for Reader stale data, Writer buffer leak, and z…",
"author_name": "Lance Kinley",
"author_login": "lkinley-rythmos",
"committed_at": "2026-03-04T22:21:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "74d44e96f45dcec80d6c9ade6e035bb88cb86f6f",
"body": "- Reader.read: clear r.data in direct mode so that a subsequent\n zero-length block does not copy stale pool data\n- Writer.Reset: return data buffer to pool before resetting to\n prevent a memory leak on reuse\n- Writer.ReadFrom: skip write and handler call when read returns\n zero bytes\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix Reader stale data, Writer buffer leak, and zero-length write",
"author_name": "Lance Kinley",
"author_login": "lkinley-rythmos",
"committed_at": "2026-02-07T19:19:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ace844d9aa4689551c0679d4a700adb95f0c5cd1",
"body": "Fixes #239.",
"is_bot": false,
"headline": "State: do not wrap io.EOF",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2026-01-17T09:00:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6fe6d4072fb777a2e7a3bab930f5de8ce5763f8",
"body": "Fix broken tests",
"is_bot": false,
"headline": "Merge pull request #238 from ncruces/ncruces",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2026-01-16T14:48:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7aa3fed660712d5b16aa8bcad9913cf436c63ed4",
"body": "This was introduced in 0f7173a to fix #202.",
"is_bot": false,
"headline": "Fix block tests.",
"author_name": "Nuno Cruces",
"author_login": "ncruces",
"committed_at": "2026-01-14T11:30:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6dfb2d648aba46961bc40f435a8467ea32e1e357",
"body": "I don't know what's going on with the test files, but both report errors\nwhen ran through:\n\n lz4 --test file.lz4\n\nSince #229 tries to continue reading past the first frame, it causes\nthese errors to show up.",
"is_bot": false,
"headline": "Fix legacy reader test.",
"author_name": "Nuno Cruces",
"author_login": "ncruces",
"committed_at": "2026-01-12T14:03:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a72bd0ba2fe6b46422171fd294e081af81dde1a2",
"body": "These were broken since #220 and EOF resets the frame, which clears the\nContentSize, and both ReadAll and Copy read through EOF.\n\nAlso clarified the comment, as #229 means this is only really useful for\nthe current frame, whereas a stream is now a sequence of frames.",
"is_bot": false,
"headline": "Fix SizeOption tests.",
"author_name": "Nuno Cruces",
"author_login": "ncruces",
"committed_at": "2026-01-12T11:39:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a51f81be7b1c7f8e258ea4ef5064fc0279725ce",
"body": "This was introduced in #228.",
"is_bot": false,
"headline": "Fix crash in TestReader.",
"author_name": "Nuno Cruces",
"author_login": "ncruces",
"committed_at": "2026-01-12T11:36:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd9d7a4f66405a92f4881933816b828b0f7d5fe2",
"body": "replace deprecated functions",
"is_bot": false,
"headline": "Merge pull request #230 from 0xAozora/v4",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2025-05-10T15:40:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ebf0a52dd7a5857a9f857d2bc53dec2b1917855",
"body": null,
"is_bot": false,
"headline": "replace deprecated functions",
"author_name": "0xAozora",
"author_login": "0xAozora",
"committed_at": "2025-05-09T01:48:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd108f5ec171000788650f84c0e0f7970f108012",
"body": "Support for Append",
"is_bot": false,
"headline": "Merge pull request #229 from 0xAozora/v4",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2025-05-08T09:46:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bdf5f634e11b376161b33f3e3a3fae7dfeff914",
"body": null,
"is_bot": false,
"headline": "Support for Append",
"author_name": "0xAozora",
"author_login": "0xAozora",
"committed_at": "2025-04-26T21:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71a9b632b2ba7bc051d74d47e579a2d276e177bd",
"body": "Eliminate interface-boxing allocations in blocks.go",
"is_bot": false,
"headline": "Merge pull request #228 from pendo-io/elim-blocks-ifaceallocs",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2025-04-11T07:15:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd6458dd51fd0d9c3f32c79e1f335507431ae8f2",
"body": null,
"is_bot": false,
"headline": "Improve allocations in blocks.go",
"author_name": "Drew Boyuka",
"author_login": "daboyuka",
"committed_at": "2025-04-09T20:23:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "006d000e4499194c10854972af93a9089e08d848",
"body": null,
"is_bot": false,
"headline": "Add unit tests and benchmarks for blocks.go",
"author_name": "Drew Boyuka",
"author_login": "daboyuka",
"committed_at": "2025-04-09T20:23:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b9933d22aef22a311a48aefa4ea524649b7c611",
"body": "Fix WriteTo on a started Reader, and the resulting incorrect error message",
"is_bot": false,
"headline": "Merge pull request #227 from jwebb/fix-fail",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2025-03-17T14:06:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bb69037d4d33b217543d17b3756c7e8996182d7",
"body": null,
"is_bot": false,
"headline": "Add WriteTo test",
"author_name": "Jamie Webb",
"author_login": null,
"committed_at": "2025-03-17T12:51:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7f887bceb24cde470103a262529c16679d013bd",
"body": "…ssage",
"is_bot": false,
"headline": "Fix WriteTo on a started Reader, and the resulting incorrect error me…",
"author_name": "Jamie Webb",
"author_login": null,
"committed_at": "2025-03-13T18:07:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a4bbaef2f12f93c70060b52121e992756077a1f",
"body": "Add CLI benchmarks",
"is_bot": false,
"headline": "Merge pull request #225 from klauspost/add-cli-benchmark",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2025-01-12T09:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6945807a992539feec79df1e6751bc910ff9681a",
"body": "internal/lz4block: Speed up noasm decoder",
"is_bot": false,
"headline": "Merge pull request #226 from greatroar/noasm",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2025-01-12T09:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3839dcdcf7ce84eb46efe66a93d9d664e962d77",
"body": "When the compiler is told exactly how many bytes a copy call should\ncopy, and that number is at most 16, it will inline the call. Also, the\nold code only took the short match shortcut when the short literal\nshortcut was also taken. But long literals with short matches are\ncommon.\n\nBenchmark results \n[…]\n6 702.8Mi ± 1% 1309.5Mi ± 7% +86.32% (p=0.000 n=10)\n UncompressRand-16 6.878Gi ± 0% 6.850Gi ± 1% -0.42% (p=0.009 n=10)\n geomean 1.699Gi 2.430Gi +43.04%",
"is_bot": false,
"headline": "internal/lz4block: Speed up noasm decoder",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2025-01-11T09:57:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eb139b7a84fdaa193437ab155996e18b54e381d5",
"body": "Add in-memory benchmark of stream encoding.\n\nSpecify `-bench=n` to run n benchmarks on every input with provided settings.",
"is_bot": false,
"headline": "Add CLI benchmarks",
"author_name": "Klaus Post",
"author_login": "klauspost",
"committed_at": "2024-12-31T14:48:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f7173a5b95f975973834ea04c88e62efca736d2",
"body": "This reduces the package size substantially.\nFixes #202.",
"is_bot": false,
"headline": "testdata: gzip compress raw files",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2024-12-12T19:11:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bb851f7eb9c71aca9c3a67399a7a826c4d2b7c7",
"body": "fix: reset frame when read to EOF to release buffer in Block",
"is_bot": false,
"headline": "Merge pull request #220 from aiquestion/v4_restframe",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2024-12-12T17:01:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdaa7e2eae2400f761d8503ca047b46d2ab67507",
"body": "Fixes #223.",
"is_bot": false,
"headline": "lz4stream/block: compute block checksum on the block not its source.",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2024-12-12T16:53:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72f5eb617db082814b55046b7959073b5eb8b92b",
"body": null,
"is_bot": false,
"headline": "fix: reset frame when read to EOF to release buffer in Block",
"author_name": "ByteDance",
"author_login": "aiquestion",
"committed_at": "2024-08-19T11:41:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "294e7659e17723306ebf3a44cd7ad2c11f456c37",
"body": "Reverts bc1239ba, no longer needed to conform to legacy",
"is_bot": false,
"headline": "Merge pull request #216 from evanphx/b-fix-tests",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2024-01-08T20:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e17a24fd413d8ffe9f563376e803d4ddce07288",
"body": "This fixes the tests and verifies that the fix from bc1239ba, which\nbroke the tests, is no longer needed to conform to legacy compression.",
"is_bot": false,
"headline": "Reverts bc1239ba, no longer needed to conform to legacy",
"author_name": "Evan Phoenix",
"author_login": "evanphx",
"committed_at": "2024-01-08T19:42:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9542ba54f589829673a0403acffdfdb5a6fad37a",
"body": null,
"is_bot": false,
"headline": "CI: update go versions to more recent ones",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2024-01-08T13:04:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9eb671a7a0692d7b0ac074f3b4cb43dc531dd5b",
"body": null,
"is_bot": false,
"headline": "cmd/lz4c: update go.mod and fix issue #214",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2024-01-03T16:20:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "219b252affdff286ab22e08f1da635b3e40e55e6",
"body": "Update README.md: add @latest to cli install command",
"is_bot": false,
"headline": "Merge pull request #213 from corneliusroemer/patch-1",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2024-01-03T16:04:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58c60739dabf487fe6d5b1bab195570e5293cb05",
"body": null,
"is_bot": false,
"headline": "Update README.md: add @latest to cli install command",
"author_name": "Cornelius Roemer",
"author_login": "corneliusroemer",
"committed_at": "2023-12-25T04:12:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e974631fb9d0027d944e898862d8c31b6f27e1b8",
"body": "CompressingReader: compressed data reader stream (#210)",
"is_bot": false,
"headline": "Merge pull request #211 from oakad/issue_210",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2023-12-08T15:52:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76139896ff3591a8f18047bc676faefe45ec647c",
"body": "Signed-off-by: Alex Dubov <oakad@yahoo.com>",
"is_bot": false,
"headline": "CompressingReader: support older Go versions",
"author_name": "Alex Dubov",
"author_login": "oakad",
"committed_at": "2023-12-08T05:34:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0f6c5e4be7afda8aa9154f2b85ee64e9c3c5008",
"body": "Writer: initialize the writer on Flush() if wasn't initialized before",
"is_bot": false,
"headline": "Merge pull request #212 from edigaryev/writer-init-on-flush",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2023-12-07T08:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ac62b559678924aeda07eb7a725c3d382a06ccd",
"body": "This allows compressing empty files, because without this change\nthe proper headers were not emitted when reading an empty file\nvia e.g. io.Copy().\n\nSigned-off-by: Nikolay Edigaryev <edigaryev@gmail.com>",
"is_bot": false,
"headline": "Writer: initialize the writer on Flush() if wasn't initialized before",
"author_name": "Nikolay Edigaryev",
"author_login": "edigaryev",
"committed_at": "2023-11-22T12:39:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a80a2f8726c7b603b98707757eef952377a16a9",
"body": "It is possible for out buffer to have no overflow data and yet\nthe read offset will be not zero (if byte slices passed by the reader\njust happened to align perfectly).\n\nSigned-off-by: Alex Dubov <oakad@yahoo.com>",
"is_bot": false,
"headline": "CompressingReader: account for possible out buffer state",
"author_name": "Alex Dubov",
"author_login": "oakad",
"committed_at": "2023-11-13T07:16:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2ece5b1696566fc0d204f3ceab7c9aa41b8c7ba",
"body": "Out buffer may have some stale overflow data on Reset.\n\nSigned-off-by: Alex Dubov <oakad@yahoo.com>",
"is_bot": false,
"headline": "CompressingReader: make sure to clear out buffer",
"author_name": "Alex Dubov",
"author_login": "oakad",
"committed_at": "2023-11-13T07:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65348f5f34d70b6fda82a21e53a55eb13b5024c7",
"body": "In Go, `http.Request` requires an `io.ReadCloser` for an upload body. To\nfacilitate compression of data being uploaded we want to wrap a\nsource reader (such an `io.File`) with a proposed\n`lz4.CompressingReader`, whereupon the said reader can be set directly\ninto `http.Request` Body field.\n\nThis benefits not only the plain `http.Request`, but also the various\nnetwork file storage APIs which build on top of Go's http client.\n\nSigned-off-by: Alex Dubov <oakad@yahoo.com>",
"is_bot": false,
"headline": "CompressingReader: compressed data reader stream (#210)",
"author_name": "Alex Dubov",
"author_login": "oakad",
"committed_at": "2023-11-13T06:50:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef495ee7d4516ddb9b31019170c8c3eb311caeb5",
"body": "Restore copyMatchTry4",
"is_bot": false,
"headline": "Merge pull request #207 from honeycombio/lizf.copy4",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2023-06-14T14:02:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8801e2e957d65c696d92420e7d55945c12625e4d",
"body": null,
"is_bot": false,
"headline": "Restore copyMatchTry4",
"author_name": "Liz Fong-Jones",
"author_login": "lizthegrey",
"committed_at": "2023-06-03T00:48:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a69bd8894ef1e7ec64b86daa24034b08e25005e",
"body": "Signed-off-by: Pierre Curto <pierre.curto@gmail.com>",
"is_bot": false,
"headline": "update all dependencies",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2023-02-25T15:21:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2b3f5d3e4659cc4fd720d1649c39b5627187261",
"body": "Revert \"Hash five bytes instead of six\"",
"is_bot": false,
"headline": "Merge pull request #197 from greatroar/revert-hash5",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-09-27T07:11:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cca61bae2446aeb57953e99963e33f13eea4e3be",
"body": "This reverts commit dff8cbc7b3b0fd8dbab7f517327f59388c1b25fd.\n\nAccording to @klauspost's research, this doesn't necessarily produce\nsmaller output and decompression speed suffers quite a bit. Closes #196.",
"is_bot": false,
"headline": "Revert \"Hash five bytes instead of six\"",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-09-25T14:42:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edc95a188bc81afa4a34b114aafcb8d41513dc84",
"body": "Signed-off-by: Pierre Curto <pierre.curto@gmail.com>",
"is_bot": false,
"headline": "internal/xxh: update the origin of the code",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-09-14T05:59:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb3e7ea2cd15fd4d9f4d65333308f20d9b5d8156",
"body": "Restore fix for #51, but in a different form",
"is_bot": false,
"headline": "Merge pull request #193 from greatroar/fix-189",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-09-10T06:38:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "118da3a0050fdc247c5b34f599424d2cabd1eb42",
"body": "The check for end > len(dst) was removed to fix #167, but this caused\na new bug, #189. It's restored in a form that avoids both.\n\nFixes #189, #191.",
"is_bot": false,
"headline": "Restore fix for #51, but in a different form",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-09-09T11:36:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3eaa1e8841ece1461ec5e0f1fbbd5f1c52d2f85",
"body": "remove state change after Flush",
"is_bot": false,
"headline": "Merge pull request #188 from leehinman/flush_fix",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-06-15T06:43:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8582079abcd01a8243fc7d29eea6e5f4aa875e7f",
"body": "A call do Flush does not necessarily mean that the state should\nchange. Another write could come in, if the state is closed this\ncan't occur. Another Write can come in, it just needs to be a new\nblock.",
"is_bot": false,
"headline": "remove state change after Flush",
"author_name": "Lee E. Hinman",
"author_login": "leehinman",
"committed_at": "2022-06-15T01:28:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "885e900f46f2b4ba02927eb80e982edd8db50236",
"body": "do not auto-Close() Writer after ReadFrom()/Copy()",
"is_bot": false,
"headline": "Merge pull request #184 from lizthegrey/patch-1",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-05-23T07:34:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec13d8cf53539cda9a8ef35ffaf0c6d31118a6d8",
"body": "ReadFrom()/Copy() should leave it to user whether or not to Close() afterwards rather than shutting down/flushing immediately after the buffer is copied in.\r\n\r\nfixes #183",
"is_bot": false,
"headline": "do not auto-Close() Writer after ReadFrom()/Copy()",
"author_name": "Liz Fong-Jones",
"author_login": "lizthegrey",
"committed_at": "2022-05-18T05:06:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6ed913a9bb183497c53f77350d269427ab803ef",
"body": "Fix Reader.Reset() docs",
"is_bot": false,
"headline": "Merge pull request #179 from bodgit/doc",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-05-13T08:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dece95a203d1c37e41e8284f0cdb74709d84031",
"body": null,
"is_bot": false,
"headline": "Fix Reader.Reset() docs",
"author_name": "Matt Dainty",
"author_login": "bodgit",
"committed_at": "2022-05-12T17:30:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8cae7c096c63b2f8ca10b20843b8504e95d96a0",
"body": "Decoder improvements",
"is_bot": false,
"headline": "Merge pull request #172 from greatroar/decoder-fixes",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-03-22T07:05:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db11e2633d91d918a02a208733b3cfab8b9e4000",
"body": "The other decoders handle this correctly.",
"is_bot": false,
"headline": "internal/lz4block: Handle zero offsets in amd64 shortcut",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-02-18T13:11:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c0f44d5dc8a9d0db8a06ce7b2a3a6b5484a5cf4",
"body": "This corner case wasn't detected by any of the decoders.",
"is_bot": false,
"headline": "internal/lz4block: Detect match with no space for offset",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-02-18T13:03:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24303cffaad515ae9d6613a91a0f725003b1847d",
"body": "Use fast loop after dict copy. Checking for its possibility costs as\nmany instructions as jumping over it.\n\nMove SUBS close to conditional branches for CPUs that fuse these\ninstructions.\n\nShave one instruction off the remainder handling code after this loop.\nA load from register base+register offset has the same latency and\nthroughput as a load from register+constant offset, at least on\nCortex-A72.",
"is_bot": false,
"headline": "internal/lz4block: arm64 decoder improvements",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-02-16T21:27:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc1239ba9073d34e1c5cc25110deb212d3e72526",
"body": null,
"is_bot": false,
"headline": "[legacy] Writer: fix #156",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-12T19:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9f4ce27eb6a3bdcc6830dd5261c2dfa2cf9c8d7",
"body": null,
"is_bot": false,
"headline": "Writer: fix #170",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-12T08:42:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "687388676c983331e18e229c430e9cc108782822",
"body": null,
"is_bot": false,
"headline": "portable encoder: adjust off by 1 bound checks",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-12T08:24:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e764f73f7cb74bcd418db52060b12cf76d1128e",
"body": null,
"is_bot": false,
"headline": "portable decoder: fix #167",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-12T08:24:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49196799640a4a26196ab01472e7bde34de6734d",
"body": "internal/lz4block: Faster table reset",
"is_bot": false,
"headline": "Merge pull request #169 from greatroar/fast-table-reset",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-12T08:10:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92c7da43462013e56f330e0cd7829905eee3a988",
"body": "Fix performance regression in amd64 decoder",
"is_bot": false,
"headline": "Merge pull request #168 from greatroar/amd64-regression",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-12T08:08:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd2bd12884a9584f43c1ee51524fa238bc3c5b53",
"body": "Zeroing out the 128kiB hash table takes a considerable amount of time in\nrepeated calls to CompressBlock on small, poorly compressible blocks.\nGive the hashtable an 8kiB bitmap indicating which entries are in use\nand zero that out instead.\n\nLinux/amd64, Go 1.17:\n\nname old speed new\n[…]\npressTwain-8 532MB/s ± 4% 526MB/s ± 6% ~ (p=0.283 n=19+20)\nCompressRand-8 21.1MB/s ± 4% 21.2MB/s ± 7% ~ (p=0.635 n=20+20)\n\n(I'm not sure why 1.18 is slower than 1.17 overall.)",
"is_bot": false,
"headline": "internal/lz4block: Faster table reset",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-02-09T17:36:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a79cadb95a1ac1b35202112499e46fd57a3995ad",
"body": "In the fix for #163, I accidentally rerouted matches without literals\nthrough the slow match copy path. This undoes the mistake, with the\nadditional optimization of using 32-bit instructions where possible,\nto counter some slowdown in BenchmarkUncompressDigits.\n\nCompared to 257c664d416bd8deace75610e\n[…]\n± 2% 2.38GB/s ± 1% +2.65% (p=0.000 n=10+19)\nUncompressTwain-8 812MB/s ± 1% 1227MB/s ± 1% +51.20% (p=0.000 n=10+20)\nUncompressRand-8 3.90GB/s ± 2% 3.87GB/s ± 2% ~ (p=0.062 n=9+20)",
"is_bot": false,
"headline": "internal/lz4block: Fix performance regression in amd64 decoder",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-02-09T16:34:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "271c8cc4291b8dda11d9b355957505f3cb4d33c7",
"body": "It was compressing the wrong file and didn't get enough space to\nactually compress its input.",
"is_bot": false,
"headline": "Fix BenchmarkCompressRandom",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-02-09T16:24:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c54b395e3ce35d2f24f09bf41b46ddeebdc98301",
"body": "internal/lz4block: Remove unused loop from arm64 decoder",
"is_bot": false,
"headline": "Merge pull request #166 from greatroar/arm64-cleanup",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-07T20:03:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cbdd8169b0510935efd9164dbbea4dcda897fb6",
"body": null,
"is_bot": false,
"headline": "internal/lz4block: Remove unused loop from arm64 decoder",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-02-07T18:28:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5532e5996ee86d17f8ce2694c08fb5bf3c6b471",
"body": "Permit some invalid inputs in portable decoder",
"is_bot": false,
"headline": "Merge pull request #165 from greatroar/fix-160",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-07T17:09:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f27c1a0ed0f6c78a37c7b904fe041be5b5d6a93e",
"body": "Inputs that violate the end of block restrictions are now permitted in\nthe portable decoder, so that UncompressBlock (and its companion\nWithDict) is now consistent across platforms. The asm decoders already\nallow these inputs and TestBlockDecode relied on them producing the right\noutput, even when an error was returned.\n\nFixes #160.",
"is_bot": false,
"headline": "internal/lz4block: Permit some invalid inputs in portable decoder",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-02-06T12:50:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "947bcf2cb7b335de36ac19425f9dbe257f85d38c",
"body": "Fixes #163.",
"is_bot": false,
"headline": "internal/lz4block: Handle empty buffer in amd64 decoder",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-02-06T12:38:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "937a472cf6230c7a4662d8f9831d54faff99587d",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/v4' into v4",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-05T08:10:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b2f3242d34a675602201ec397e1a25ac80f110c",
"body": "internal/lz4block: Simplify portable decoder",
"is_bot": false,
"headline": "Merge pull request #159 from greatroar/simplify-decode-other",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-05T08:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e2de87372f5c27f7323640dfa590520a2d8f508",
"body": "internal/lz4block: Short literal copying in arm64 decoder",
"is_bot": false,
"headline": "Merge pull request #162 from greatroar/arm64-literal-copy",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-02-05T08:09:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e99166d96a6e0c4d9f5141d3cf9e6952ee8dc7a4",
"body": "This borrows a trick from the amd64 decoder: copy short literals by\nalways copying 16 bytes, using the space beyond the literal's length as\nscratch space (but only when we're >=16 bytes from the end of src, dst).\n\nBenchmark results on RPi4B:\n\nname old speed new speed delta\nU\n[…]\n(p=0.000 n=10+10)\nUncompressRand-4 1.14GB/s ± 1% 1.13GB/s ± 1% ~ (p=0.075 n=10+10)\n\nAlso moved a SUBS to just before the associated branch to allow\ninstruction fusion on ARMs that do that.",
"is_bot": false,
"headline": "internal/lz4block: Short literal copying in arm64 decoder",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-02-04T11:37:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "30805c8e2e72469c5845d4678d222b9bc1b245d8",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/v4' into v4",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-01-31T08:49:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bd757cc8db31d83920c9972713f2463426e96ce",
"body": "internal/lz4block: Copy literals of <=48 bytes through XMM registers in amd64 decoder",
"is_bot": false,
"headline": "Merge pull request #161 from greatroar/amd64-match-copy-48",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-01-31T08:49:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "956d8fb4a36b159abc67c1261dbbeae22e5d0b56",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/v4' into v4",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-01-31T08:45:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "257c664d416bd8deace75610eedccf6504312315",
"body": "name old speed new speed delta\nUncompressPg1661-8 1.15GB/s ± 1% 1.19GB/s ± 1% +3.39% (p=0.000 n=10+10)\nUncompressDigits-8 1.89GB/s ± 0% 2.33GB/s ± 1% +23.46% (p=0.000 n=9+10)\nUncompressTwain-8 1.19GB/s ± 1% 1.23GB/s ± 0% +3.43% (p=0.000 n=10+10)\nUncompressRand\n[…]\ne 37.4% of its literals\nhave lengths 17-48. In Twain and Pg1661, this is <4.1%.\n\nThis is faster than copying 32 bytes. At 64 bytes, digits gets faster\nstill whlie Twain and Pg1661 get slightly slower.",
"is_bot": false,
"headline": "internal/lz4block: Copy literals of <=48 bytes through XMM regs",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-01-30T19:44:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ce76f0ba2d92d1175f50c366059c0876bdc929ae",
"body": null,
"is_bot": false,
"headline": "internal/lz4block: Simplify portable decoder",
"author_name": "greatroar",
"author_login": "greatroar",
"committed_at": "2022-01-30T15:19:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "677f6a5a5b2ebbfee631cb910a0ff9b0dd753523",
"body": "Updated example:",
"is_bot": false,
"headline": "Merge pull request #158 from satheshshiva/v4",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2022-01-13T09:33:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "953bb257cfa8d235e3bd8e59f0b405e2ade5a11e",
"body": "…ine the buffer size so that the code can be used to determine buf length for any length of string.",
"is_bot": false,
"headline": "Updated example: changed the len to CompressBlockBound func to determ…",
"author_name": "Sathesh Sivashanmugam",
"author_login": null,
"committed_at": "2022-01-13T03:46:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0def81da1e74133e9b99586d9e984b4b2322031",
"body": null,
"is_bot": false,
"headline": "Writer: remove unnecessary condition in init method",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2021-12-21T14:56:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f646edb739b6688767ffeb93c0fba7f8340eb5ad",
"body": null,
"is_bot": false,
"headline": "Fix formatting.",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2021-12-21T14:56:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a134e63e138e8dcef0be0a90bb586bccf4e99651",
"body": "Fix TestWriter",
"is_bot": false,
"headline": "Merge pull request #155 from imura-tatsuya-ab/size-option",
"author_name": "Pierre Curto",
"author_login": "pierrec",
"committed_at": "2021-12-02T19:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7573151e5744378e29fa53f3df36565d242b166f",
"body": null,
"is_bot": false,
"headline": "Fix TestWriter",
"author_name": "imura_tatsuya",
"author_login": "imura-tatsuya-ab",
"committed_at": "2021-12-02T10:59:36Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 3,
"commits_last_year": 22,
"latest_release_at": "2026-05-31T08:31:30Z",
"latest_release_tag": "v4.1.27",
"releases_from_tags": false,
"days_since_last_push": 58,
"active_weeks_last_year": 7,
"days_since_latest_release": 58,
"mean_days_between_releases": 82.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/pierrec/lz4/v4",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/pierrec/lz4/v4",
"is_deprecated": false,
"latest_version": "v4.1.27",
"repository_url": "https://github.com/pierrec/lz4",
"versions_count": 32,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-05-31T08:22:42Z",
"latest_version_yanked": null,
"days_since_latest_publish": 58
}
]
},
"popularity": {
"forks": 152,
"stars": 967,
"watchers": 21,
"fork_history": {
"days": [
{
"date": "2015-03-20",
"count": 1
},
{
"date": "2015-04-15",
"count": 1
},
{
"date": "2015-05-01",
"count": 1
},
{
"date": "2015-09-28",
"count": 1
},
{
"date": "2015-12-02",
"count": 1
},
{
"date": "2016-02-19",
"count": 1
},
{
"date": "2016-10-21",
"count": 1
},
{
"date": "2016-12-04",
"count": 1
},
{
"date": "2017-01-20",
"count": 1
},
{
"date": "2017-07-08",
"count": 1
},
{
"date": "2017-08-11",
"count": 1
},
{
"date": "2017-08-26",
"count": 1
},
{
"date": "2017-08-28",
"count": 2
},
{
"date": "2017-09-18",
"count": 1
},
{
"date": "2017-09-20",
"count": 1
},
{
"date": "2017-12-17",
"count": 1
},
{
"date": "2017-12-24",
"count": 1
},
{
"date": "2018-01-17",
"count": 1
},
{
"date": "2018-01-24",
"count": 1
},
{
"date": "2018-04-05",
"count": 1
},
{
"date": "2018-06-10",
"count": 1
},
{
"date": "2018-06-14",
"count": 1
},
{
"date": "2018-09-06",
"count": 2
},
{
"date": "2018-09-12",
"count": 1
},
{
"date": "2018-09-27",
"count": 1
},
{
"date": "2018-10-05",
"count": 1
},
{
"date": "2018-10-19",
"count": 1
},
{
"date": "2018-10-29",
"count": 1
},
{
"date": "2018-11-07",
"count": 1
},
{
"date": "2018-11-08",
"count": 1
},
{
"date": "2018-11-14",
"count": 1
},
{
"date": "2018-11-15",
"count": 1
},
{
"date": "2018-11-22",
"count": 1
},
{
"date": "2018-12-20",
"count": 1
},
{
"date": "2019-01-10",
"count": 1
},
{
"date": "2019-01-16",
"count": 1
},
{
"date": "2019-02-09",
"count": 1
},
{
"date": "2019-02-25",
"count": 1
},
{
"date": "2019-03-04",
"count": 1
},
{
"date": "2019-03-05",
"count": 1
},
{
"date": "2019-03-11",
"count": 1
},
{
"date": "2019-03-26",
"count": 1
},
{
"date": "2019-04-11",
"count": 1
},
{
"date": "2019-04-24",
"count": 1
},
{
"date": "2019-05-08",
"count": 2
},
{
"date": "2019-06-11",
"count": 1
},
{
"date": "2019-06-17",
"count": 1
},
{
"date": "2019-06-20",
"count": 1
},
{
"date": "2019-06-29",
"count": 1
},
{
"date": "2019-06-30",
"count": 1
},
{
"date": "2019-07-01",
"count": 1
},
{
"date": "2019-07-08",
"count": 1
},
{
"date": "2019-07-25",
"count": 1
},
{
"date": "2019-07-30",
"count": 1
},
{
"date": "2019-08-09",
"count": 1
},
{
"date": "2019-08-30",
"count": 1
},
{
"date": "2019-09-05",
"count": 1
},
{
"date": "2019-09-09",
"count": 1
},
{
"date": "2019-09-17",
"count": 1
},
{
"date": "2019-10-08",
"count": 1
},
{
"date": "2019-10-13",
"count": 1
},
{
"date": "2019-11-13",
"count": 1
},
{
"date": "2019-12-17",
"count": 1
},
{
"date": "2019-12-18",
"count": 1
},
{
"date": "2020-01-14",
"count": 1
},
{
"date": "2020-01-30",
"count": 1
},
{
"date": "2020-02-15",
"count": 1
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-02-27",
"count": 1
},
{
"date": "2020-03-07",
"count": 1
},
{
"date": "2020-04-05",
"count": 1
},
{
"date": "2020-04-16",
"count": 1
},
{
"date": "2020-04-28",
"count": 1
},
{
"date": "2020-05-26",
"count": 1
},
{
"date": "2020-08-11",
"count": 1
},
{
"date": "2020-09-08",
"count": 1
},
{
"date": "2020-11-11",
"count": 1
},
{
"date": "2020-11-30",
"count": 1
},
{
"date": "2020-12-03",
"count": 1
},
{
"date": "2020-12-07",
"count": 1
},
{
"date": "2020-12-16",
"count": 1
},
{
"date": "2020-12-20",
"count": 1
},
{
"date": "2020-12-30",
"count": 1
},
{
"date": "2021-03-17",
"count": 1
},
{
"date": "2021-04-02",
"count": 1
},
{
"date": "2021-04-11",
"count": 1
},
{
"date": "2021-06-01",
"count": 1
},
{
"date": "2021-06-28",
"count": 1
},
{
"date": "2021-06-29",
"count": 1
},
{
"date": "2021-08-29",
"count": 1
},
{
"date": "2021-09-03",
"count": 1
},
{
"date": "2021-09-27",
"count": 2
},
{
"date": "2021-09-28",
"count": 1
},
{
"date": "2021-10-30",
"count": 1
},
{
"date": "2021-11-24",
"count": 1
},
{
"date": "2021-12-02",
"count": 2
},
{
"date": "2021-12-06",
"count": 1
},
{
"date": "2021-12-22",
"count": 1
},
{
"date": "2022-01-13",
"count": 1
},
{
"date": "2022-01-21",
"count": 1
},
{
"date": "2022-02-08",
"count": 1
},
{
"date": "2022-05-12",
"count": 1
},
{
"date": "2022-06-15",
"count": 1
},
{
"date": "2022-06-17",
"count": 1
},
{
"date": "2022-06-19",
"count": 1
},
{
"date": "2022-08-04",
"count": 1
},
{
"date": "2022-08-11",
"count": 1
},
{
"date": "2022-09-29",
"count": 1
},
{
"date": "2022-10-12",
"count": 1
},
{
"date": "2022-10-13",
"count": 1
},
{
"date": "2022-10-20",
"count": 1
},
{
"date": "2023-03-09",
"count": 1
},
{
"date": "2023-04-03",
"count": 1
},
{
"date": "2023-04-20",
"count": 1
},
{
"date": "2023-04-21",
"count": 1
},
{
"date": "2023-04-26",
"count": 1
},
{
"date": "2023-06-30",
"count": 1
},
{
"date": "2023-11-07",
"count": 1
},
{
"date": "2023-11-13",
"count": 1
},
{
"date": "2023-12-25",
"count": 1
},
{
"date": "2024-01-03",
"count": 1
},
{
"date": "2024-01-06",
"count": 1
},
{
"date": "2024-03-26",
"count": 1
},
{
"date": "2024-05-24",
"count": 1
},
{
"date": "2024-05-30",
"count": 1
},
{
"date": "2024-06-11",
"count": 1
},
{
"date": "2024-08-19",
"count": 1
},
{
"date": "2024-10-13",
"count": 1
},
{
"date": "2025-02-01",
"count": 1
},
{
"date": "2025-03-13",
"count": 1
},
{
"date": "2025-03-25",
"count": 1
},
{
"date": "2025-04-09",
"count": 1
},
{
"date": "2025-04-24",
"count": 1
},
{
"date": "2025-05-20",
"count": 1
},
{
"date": "2025-06-04",
"count": 1
},
{
"date": "2025-08-05",
"count": 1
},
{
"date": "2025-08-07",
"count": 1
},
{
"date": "2025-08-26",
"count": 1
},
{
"date": "2025-09-30",
"count": 1
},
{
"date": "2025-12-08",
"count": 1
},
{
"date": "2026-02-07",
"count": 1
},
{
"date": "2026-03-23",
"count": 1
},
{
"date": "2026-04-19",
"count": 1
},
{
"date": "2026-05-06",
"count": 1
},
{
"date": "2026-07-13",
"count": 1
}
],
"complete": true,
"collected": 150,
"total_forks": 152
},
"star_history": null,
"open_issues_and_prs": 24
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"cmd/lz4c/go.mod",
"fuzz/go.mod",
"go.mod"
],
"largest_source_bytes": 12487,
"source_files_sampled": 36,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"fuzz/go.mod",
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 12,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "code.cloudfoundry.org/bytefmt",
"direct": false,
"version": "0.0.0-20231017140541-3b893ed0421b",
"ecosystem": "go"
},
{
"name": "github.com/dvyukov/go-fuzz",
"direct": false,
"version": "0.0.0-20201115201419-0701ec3cea76",
"ecosystem": "go"
},
{
"name": "github.com/elazarl/go-bindata-assetfs",
"direct": false,
"version": "1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "0.0.15",
"ecosystem": "go"
},
{
"name": "github.com/pierrec/cmdflag",
"direct": false,
"version": "0.0.2",
"ecosystem": "go"
},
{
"name": "github.com/pierrec/lz4/v4",
"direct": false,
"version": "4.0.0-00010101000000-000000000000",
"ecosystem": "go"
},
{
"name": "github.com/pierrec/lz4/v4",
"direct": false,
"version": "4.1.19",
"ecosystem": "go"
},
{
"name": "github.com/rivo/uniseg",
"direct": false,
"version": "0.4.4",
"ecosystem": "go"
},
{
"name": "github.com/schollz/progressbar/v3",
"direct": false,
"version": "3.14.1",
"ecosystem": "go"
},
{
"name": "github.com/stephens2424/writerset",
"direct": false,
"version": "1.0.2",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "0.15.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": false,
"version": "0.0.0-20201116002733-ac45abd4c88c",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 12,
"direct_count": 0,
"indirect_count": 12
}
},
"maintainership": {
"issues": {
"open_prs": 3,
"merged_prs": 113,
"open_issues": 21,
"closed_ratio": 0.825,
"closed_issues": 99,
"closed_unmerged_prs": 9
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "pierrec",
"commits": 219,
"avatar_url": "https://avatars.githubusercontent.com/u/368228?v=4"
},
{
"type": "User",
"login": "greatroar",
"commits": 32,
"avatar_url": "https://avatars.githubusercontent.com/u/61184462?v=4"
},
{
"type": "User",
"login": "lizthegrey",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/614704?v=4"
},
{
"type": "User",
"login": "johejo",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/25817501?v=4"
},
{
"type": "User",
"login": "klauspost",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/5663952?v=4"
},
{
"type": "User",
"login": "sbinet",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/1070920?v=4"
},
{
"type": "User",
"login": "oakad",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/139498?v=4"
},
{
"type": "User",
"login": "connor4312",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/2230985?v=4"
},
{
"type": "User",
"login": "ncruces",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/5637550?v=4"
},
{
"type": "User",
"login": "0xAozora",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/12783903?v=4"
}
],
"contributors_sampled": 37,
"top_contributor_share": 0.666
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 4,
"reason": "4 out of 9 merged PRs checked by a CI test -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 8,
"reason": "Found 9/11 approved changesets -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 18 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 3,
"reason": "3 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "27 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "a296161b6e73e177e902d9cdafbd3e8b9ffaa68f",
"ran_at": "2026-07-28T13:28:05Z",
"aggregate_score": 3.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-05-31T08:24:53Z",
"oldest_open_prs": [
{
"number": 231,
"created_at": "2025-05-20T14:50:35Z",
"last_comment_at": "2026-01-26T22:57:03Z",
"last_comment_author": "ncruces"
},
{
"number": 246,
"created_at": "2026-07-18T02:01:57Z",
"last_comment_at": "2026-07-20T18:57:48Z",
"last_comment_author": "lizthegrey"
},
{
"number": 247,
"created_at": "2026-07-18T02:26:00Z",
"last_comment_at": "2026-07-20T18:57:42Z",
"last_comment_author": "lizthegrey"
}
],
"last_merged_pr_at": "2026-05-31T08:22:42Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 141,
"created_at": "2021-09-13T16:12:52Z",
"last_comment_at": "2021-09-20T16:50:39Z",
"last_comment_author": "phacops"
},
{
"number": 151,
"created_at": "2021-11-11T01:46:37Z",
"last_comment_at": "2021-12-03T03:30:55Z",
"last_comment_author": "anatol"
},
{
"number": 156,
"created_at": "2021-12-03T03:52:24Z",
"last_comment_at": "2022-02-12T21:07:37Z",
"last_comment_author": "anatol"
},
{
"number": 171,
"created_at": "2022-02-10T20:09:59Z",
"last_comment_at": "2022-04-20T11:24:52Z",
"last_comment_author": "klauspost"
},
{
"number": 173,
"created_at": "2022-02-24T19:32:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 174,
"created_at": "2022-03-06T10:12:56Z",
"last_comment_at": "2023-12-25T04:17:30Z",
"last_comment_author": "corneliusroemer"
},
{
"number": 175,
"created_at": "2022-04-25T21:33:03Z",
"last_comment_at": "2023-12-17T07:28:26Z",
"last_comment_author": "hifi"
},
{
"number": 178,
"created_at": "2022-05-12T04:23:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 181,
"created_at": "2022-05-14T22:50:15Z",
"last_comment_at": "2022-05-25T10:43:13Z",
"last_comment_author": "sten0"
},
{
"number": 192,
"created_at": "2022-08-22T03:09:53Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 203,
"created_at": "2023-02-20T00:44:56Z",
"last_comment_at": "2023-06-03T01:05:28Z",
"last_comment_author": "lizthegrey"
},
{
"number": 204,
"created_at": "2023-03-17T10:49:55Z",
"last_comment_at": "2024-01-08T13:11:40Z",
"last_comment_author": "pierrec"
},
{
"number": 208,
"created_at": "2023-07-07T04:24:50Z",
"last_comment_at": "2025-07-15T01:10:55Z",
"last_comment_author": "jlambatl"
},
{
"number": 215,
"created_at": "2024-01-06T01:12:25Z",
"last_comment_at": "2024-01-06T01:59:09Z",
"last_comment_author": "evanphx"
},
{
"number": 219,
"created_at": "2024-07-29T10:01:43Z",
"last_comment_at": "2025-01-26T09:24:38Z",
"last_comment_author": "sincerefly"
},
{
"number": 222,
"created_at": "2024-10-10T01:24:35Z",
"last_comment_at": "2024-12-13T06:37:46Z",
"last_comment_author": "pierrec"
},
{
"number": 232,
"created_at": "2025-05-22T16:52:35Z",
"last_comment_at": "2025-05-22T16:57:24Z",
"last_comment_author": "sidd1809"
},
{
"number": 233,
"created_at": "2025-08-07T11:45:22Z",
"last_comment_at": "2025-08-08T16:37:23Z",
"last_comment_author": "tazjin"
},
{
"number": 234,
"created_at": "2025-08-28T07:10:37Z",
"last_comment_at": "2025-08-28T11:25:45Z",
"last_comment_author": "xin3liang"
},
{
"number": 235,
"created_at": "2025-10-19T01:12:45Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/pierrec/lz4",
"host": "github.com",
"name": "lz4",
"owner": "pierrec"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"security": 47,
"vitality": 60,
"community": 63,
"governance": 68,
"engineering": 58
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 60,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"commits_last_year": 22,
"human_commit_share": 1,
"days_since_last_push": 58,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 58 days ago",
"points": 18,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 58
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "22 commits in the last year",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 22
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "3 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 3,
"latest_release_tag": "v4.1.27",
"releases_from_tags": false,
"days_since_latest_release": 58,
"mean_days_between_releases": 82.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "3 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 3
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 58 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 58
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~82.3 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 82.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 58,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 58 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 58
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 63,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"forks": 152,
"stars": 967,
"watchers": 21,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "967 stars",
"points": 48.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 967
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "152 forks",
"points": 18.2,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 152
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "21 watchers",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 21
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (BSD-3-Clause)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "BSD-3-Clause"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 68,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 37,
"top_contributor_share": 0.666
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 67% of commits",
"points": 7.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 67
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "37 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 37
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 18 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"merged_prs": 113,
"open_issues": 21,
"closed_issues": 99,
"issue_closed_ratio": 0.825,
"closed_unmerged_prs": 9
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "82% of issues closed",
"points": 38.6,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 82
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "113/122 decided PRs merged",
"points": 35.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 113,
"decided": 122
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 9/11 approved changesets -- score normalized to 8",
"points": 12,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"followers": 80,
"owner_type": "User",
"is_verified": null,
"owner_login": "pierrec",
"public_repos": 49,
"account_age_days": 5823
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "80 followers of pierrec",
"points": 13.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 80,
"login": "pierrec"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "49 public repos, account ~15 yr old",
"points": 24.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 49
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/pierrec/lz4/v4"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 58
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 58 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 58
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "32 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 32
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 58,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 9 merged PRs checked by a CI test -- score normalized to 4",
"points": 8,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"go",
"golang",
"lz4",
"lz4-frame"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 47,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 34,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 9 merged PRs checked by a CI test -- score normalized to 4",
"points": 1,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 9/11 approved changesets -- score normalized to 8",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 18 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "3 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 3",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "27 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 12 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 12
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 12,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 12,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 14
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 59,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.69,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "69 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 36.8,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 69,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.02,
"toolchain_manifests": [
"cmd/lz4c/go.mod",
"fuzz/go.mod",
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "cmd/lz4c/go.mod, fuzz/go.mod, go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "cmd/lz4c/go.mod, fuzz/go.mod, go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "2 of the last 100 commits agent-authored or agent-credited",
"points": 4,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 12487,
"source_files_sampled": 36,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/36 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 36,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-28T13:28:34.812321Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pierrec/lz4.svg",
"full_name": "pierrec/lz4",
"license_state": "standard",
"license_spdx": "BSD-3-Clause"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with pierrec/lz4. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
