RustNo license detected★ 12 stars⑂ 16 forkssince Mar 2025archivedView on GitHub ↗
rust-bitcoin/bitcoin-payment-instructions holds a health index of 20 out of 100, placing it in the Critical band. It scores highest on Sustainability & Governance (65/100) and lowest on AI Readiness (36/100). The repository is archived, so no further maintenance is expected.
20
overall / 100
Critical
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
20
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Abandonment Policy applies a 40% multiplier to weighted overall health and gives it a ceiling of 29.
archived on GitHub by its maintainersOverall rating: Critical ceiling
Silence alone is never the finding — a small, finished library may need no commits for years. This alert requires both: no human commit for a long time, and obligations the project is visibly not discharging. Automated commits do not count as maintenance.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 2/16 source files over 60KB
Inputs used
primary_language
Rust
largest_source_bytes
70,670
source_files_sampled
16
oversized_source_files
2
Key facts
12GitHub stars
5contributors
38commits, last 12 months
4days since last push
9releases
1bus factor
1open issues
crates.iopackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
deps.dev does not index crates:bitcoin-payment-instructions@0.7.1; advisories assessed against the repository dependency graph instead
More detail
Star and fork history 0 ★ / 16 ⇿
0Stars
16Forks
5Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 4Patch 1
Each point covers 2 days.
OpenSSF Scorecard 4.1 / 10
4.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 15:08 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 83,
"has_wiki": true,
"homepage": "https://git.rust-bitcoin.org/rust-bitcoin/bitcoin-payment-instructions",
"languages": {
"C": 140,
"Rust": 207542,
"Shell": 4757
},
"pushed_at": "2026-07-20T21:23:22Z",
"created_at": "2025-03-23T01:36:59Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T21:24:56Z",
"description": "This Repo Has Been Migrated",
"is_archived": true,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "#bitcoin-rust on Libera",
"name": "Rust Bitcoin Community",
"type": "Organization",
"login": "rust-bitcoin",
"company": null,
"location": null,
"followers": 558,
"avatar_url": "https://avatars.githubusercontent.com/u/37084147?v=4",
"created_at": "2018-03-05T19:06:59Z",
"is_verified": null,
"public_repos": 32,
"account_age_days": 3063
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-01-21T13:07:39Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2025-12-09T15:36:58Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2025-12-08T16:30:35Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2025-09-02T13:11:24Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2025-04-12T21:41:19Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2025-03-31T13:13:41Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2025-03-31T13:08:10Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2025-03-30T20:25:18Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2025-03-23T02:01:55Z"
}
],
"recent_commits": [
{
"oid": "be199a9c9f904d3289dc2dc1811d960c39f4c8b1",
"body": null,
"is_bot": false,
"headline": "Archival note",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-07-20T21:23:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8c75ae93b528cf20180a56f8cc3a649d94d1c1c",
"body": "Add Bark adress parsing",
"is_bot": false,
"headline": "Merge pull request #25 from benthecarman/bark",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-07-20T21:20:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf53fff4cf5bf14bb900f7e994fdb54c5d2b996",
"body": "Adds support for parsing bark's address format and parsing ark/tark\nbip321 uris. Bark does not have a minimal dep/msrv library to import so\nwe instead implemented a minimal version to parse and validate their\naddresses.",
"is_bot": false,
"headline": "Add Bark address parsing",
"author_name": "benthecarman",
"author_login": "benthecarman",
"committed_at": "2026-07-20T20:05:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50e16a7c72ddde33b9e4c63a7b4944fcf4727558",
"body": "Fix on-chain amount rounding",
"is_bot": false,
"headline": "Merge pull request #24 from benthecarman/fix-onchain-amount-rounding",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-07-20T18:46:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0c2d4b94bfbf1c03446fa97f4b8ebb5a63b6906",
"body": "Later releases of libc, unicode-ident, honggfuzz, and semver raise\ntheir MSRV above this crate's 1.63 MSRV, breaking the MSRV CI job.\nPin them to the last compatible versions, matching the existing\nsyn/quote/proc-macro2 pins. honggfuzz is also pinned at install time\nin ci-fuzz.sh since the version is selected by `cargo install`.",
"is_bot": false,
"headline": "Pin deps for MSRV",
"author_name": "benthecarman",
"author_login": "benthecarman",
"committed_at": "2026-06-29T09:45:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b2fb70e536312caaee4ee73d3e52c08b01ce26e",
"body": "The configurable amount path rounded millisats up to whole sats but\nthen constructed the result as millisats. Fix the bug by building the\nrounded value as sats so on-chain fixed-amount instructions has the\ncorrect amount. Added a test to find regressions.",
"is_bot": false,
"headline": "Fix on-chain amount rounding",
"author_name": "benthecarman",
"author_login": "benthecarman",
"committed_at": "2026-06-06T22:04:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d53d2441ab007836b61b492253fb557398e2003b",
"body": "Bump bitreq to 0.3 and prepare to release 0.7",
"is_bot": false,
"headline": "Merge pull request #22 from TheBlueMatt/main",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-01-21T13:07:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eee053a632802f7ef7dcb88299e7af2760e8c727",
"body": null,
"is_bot": false,
"headline": "Add cashu fuzzing target",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-01-21T12:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d15e4bc107304f3ce27848029e1e4dbf85dba0fb",
"body": null,
"is_bot": false,
"headline": "Avoid allocating a Vec for the fixed-len 32 byte pubkey",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-01-21T12:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a11be856a84095f1b00e5f5d18f7c1d651c7a7fb",
"body": "By storing relays both in the npub string as well as as tags, we\nended up always writing them out twice. Instead, only store them in\none place (the npub string).",
"is_bot": false,
"headline": "Only store relays in one place",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-01-21T12:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01502670bd5f58d54f0787740a080b3727eee3e5",
"body": null,
"is_bot": false,
"headline": "Switch to a `TagValue` for tag keys (as they're 255-byte limited)",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-01-21T12:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "911c9ee8df70035f48a5f0f84d101d19c9b7c6e5",
"body": "There's no semantic or encoded difference between `Some(empty vec)`\nand `None`, so there's also no reason for the in-memory\ndistinction.",
"is_bot": false,
"headline": "Drop `Option` around tag `Vec`s",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-01-21T12:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4d8501143a50db5df3a70507ef0695f011015be",
"body": null,
"is_bot": false,
"headline": "Override `Debug` for optionally-allocated Atring types in cashu",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-01-21T12:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dd29403edf35045ff15ee46ca7bb45f1f7e4726",
"body": null,
"is_bot": false,
"headline": "Upgrade to bitreq 0.3",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-01-21T12:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42c5f9a1596f78cf311c4d0f87d546bdcb6803c8",
"body": null,
"is_bot": false,
"headline": "Update README since we really aren't that \"basic\"",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-01-20T23:09:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56791b8ea557bbc78b435dac00470a169b8ffde4",
"body": "Spec: https://github.com/cashubtc/nuts/blob/main/26.md",
"is_bot": false,
"headline": "feat: add cashu nut26 payment request support (#21)",
"author_name": "tsk",
"author_login": "thesimplekid",
"committed_at": "2026-01-20T23:08:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13dc0dd14e22e9b3601ab14fd0aaef2efcfa2dfc",
"body": "Replace reqwest with bitreq",
"is_bot": false,
"headline": "Merge pull request #20 from TheBlueMatt/main",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2026-01-07T00:55:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c312f14fd50d23fe31b5fe01a90cb81893a36305",
"body": null,
"is_bot": false,
"headline": "Add additional pins required for MSRV builds",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-12-28T17:29:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "643c544e91923de4a11641ec31775ed9e6dcc63b",
"body": "Sadly, we'd exposed `reqwest` in our public API, so we have to\nbump the version for the swap to `bitreq`.",
"is_bot": false,
"headline": "Bump the version to 0.7 for the `bitreq` swap",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-12-28T15:03:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fc8bc11272e3e0d2943aafb09b32bb03194c243",
"body": "`reqwest` has an absolutely insane dependency tree, with\nanti-features (like insanely-fast-unsafe-IDN parsing) baked in.\nInstead, the rust-bitcoin ecosystem is starting to move to `bitreq`\nwhich is relatively simple, only depends (even optionally) on\n`tokio` and `rustls`, and doesn't bother with crap like IDNs.\n\nHere we switch over, maintaining the ability to proxy connections\nfor those that need that.",
"is_bot": false,
"headline": "Replace `reqwest` with `bitreq`",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-12-28T15:03:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be8a1722e4547af4879f6530c3f31a0a32b112e5",
"body": "Update pinning for `syn` and `quote` MSRV",
"is_bot": false,
"headline": "Merge pull request #18 from TheBlueMatt/main",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-12-09T15:36:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8cef31f2c8fa120e3a85069fab162f74e009365",
"body": "`HumanReadableName` was updated in LDK to no longer have internal\nallocations and thus is now `Copy`, not only `Clone`. Thus, we can\nremove the `clone` calls on it so that clippy is happy.",
"is_bot": false,
"headline": "Drop `HumanReadableName::clone` calls",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-12-09T14:55:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "597ea44c6c46363d4763c383e229c3512f95d908",
"body": "In 24eceb1dcbf93a8fa5e3c4aad573fc6f9595b422 we bumped the\n`lightning_invoice` dependency in the main crate but forgot to do\nso in the `fuzz` subcrate as well, which we do here.",
"is_bot": false,
"headline": "Bump `lightning_invoice` dep in `fuzz`",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-12-09T14:37:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9b30dbdea1fa84ba788a1115720da2e3318e16b",
"body": null,
"is_bot": false,
"headline": "Update pinning for `syn` and `quote` MSRV",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-12-09T14:32:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6be3aec62f288ffbfeee71abb800bf15941f4bec",
"body": "Bump LDK Deps",
"is_bot": false,
"headline": "Merge pull request #16 from chuksys/bump-ldk-deps-2.0",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-12-09T14:24:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24eceb1dcbf93a8fa5e3c4aad573fc6f9595b422",
"body": null,
"is_bot": false,
"headline": "Bump LDK Deps",
"author_name": "Chuks Agbakuru",
"author_login": "chuksys",
"committed_at": "2025-12-09T04:58:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df253f6f37aae7d58a7acb669b683f6e5bea1041",
"body": "Bump version to 0.5.1 to fix BIP 353 extra-records ignoring",
"is_bot": false,
"headline": "Merge pull request #17 from TheBlueMatt/main",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-12-08T16:30:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20256b9e03755abce12fc480a3650d81adeb8a26",
"body": null,
"is_bot": false,
"headline": "Bump version to 0.5.1 to fix BIP 353 extra-records ignoring",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-12-08T16:24:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0324f6dd412e2873f98771162e68d72404c30fb7",
"body": "Filter out TXT records not starting with `bitcoin:`",
"is_bot": false,
"headline": "Merge pull request #14 from andrei-21/fix/check-bitcoin-prefix",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-10-24T17:28:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcedfa85102deb04007b7e3739bc1e4d144d6e5a",
"body": "It is a requirement of the BIP-353",
"is_bot": false,
"headline": "Filter out TXT records not starting with `bitcoin:`",
"author_name": "Andrei",
"author_login": "andrei-21",
"committed_at": "2025-10-24T00:00:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74003b498b9bf90497457b1aab03bac48576892c",
"body": "Correct DoH base64 alphabet to base64url not base64",
"is_bot": false,
"headline": "Merge pull request #13 from TheBlueMatt/2025-09-b64url",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-09-19T17:46:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc044a8b4421437559376a72f67ec5fdf5695c24",
"body": null,
"is_bot": false,
"headline": "Make `onion_message_resolver` tests more robust by reconnecting",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-09-19T16:53:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8c6348063cb52ea1e892feabce95860071b04f5",
"body": "Fixes #11",
"is_bot": false,
"headline": "Document that OM-based HRN resolution futures do not time out",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-09-19T11:50:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d18936632616a2dbf1d5276993fb26e14d6e37d4",
"body": "DoH is supposed to require the base64url encoding of the DNS\nrequest, but our encoder was actually using classic base64. While\nthis is incorrect, it appears many (most?) DoH resolvers will\nactually accept base64 just fine.\n\nStill, best to swap for the correct alphabet, which we do here.\n\nFixes #12",
"is_bot": false,
"headline": "Correct DoH base64 alphabet to base64url not base64",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-09-19T11:47:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66daf4f267c13a83ce8f4cd72d9025193673de2a",
"body": null,
"is_bot": false,
"headline": "Bump version to 0.5 with addition of LNURL in-string detection",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-09-02T13:11:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce68b1d1327c7c7c1f1676dad955a42e8723bf61",
"body": "Use MAX_MSATS instead of magic value",
"is_bot": false,
"headline": "Merge pull request #10 from benthecarman/magic-val",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-08-25T19:08:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d92d64e6e904a5379eb0fdddfa674302d8e0c0fd",
"body": null,
"is_bot": false,
"headline": "Fix typo",
"author_name": "benthecarman",
"author_login": "benthecarman",
"committed_at": "2025-08-25T18:28:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cec7357ca96640daed99e59f4b4606727a322a6",
"body": null,
"is_bot": false,
"headline": "Use MAX_MSATS instead of magic value",
"author_name": "benthecarman",
"author_login": "benthecarman",
"committed_at": "2025-08-25T18:27:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d071ce27734ca13be2471f81abf8699d902c3a10",
"body": "Add an onion message-based DNSSEC HRN Resolver",
"is_bot": false,
"headline": "Merge pull request #6 from TheBlueMatt/2025-06-onion-resolution",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-07-24T14:30:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc474c094a992f25be1aebffd22bfce35449b2af",
"body": "Clean up some rustfmt garbage",
"is_bot": false,
"headline": "Merge pull request #9 from TheBlueMatt/main",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-07-23T22:45:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da6f72c30221c632a9f966f3f8447439f0fafde4",
"body": null,
"is_bot": false,
"headline": "Clean up some rustfmt garbage",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-07-23T22:17:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9e5fb06bfd393e0d902f88848b1580dac6108b6",
"body": "Allow for custom HTTPHrnResolvers",
"is_bot": false,
"headline": "Merge pull request #7 from benthecarman/better-http",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-07-23T22:12:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc2b29a9b7ee241a4b2dd1bd5ee466e9e7e0ed73",
"body": "Doing HRN resolution natively over the normal internet tends to be\nhorrendous for privacy. One of the main motivations for BIP 353 was\nto limit the impacts of this by allowing for easier proxying of DNS\nrequests.\n\nHere we add one such proxied request, specifically using lightning\nonion messages to do the DNS requests.",
"is_bot": false,
"headline": "Add an onion message-based DNSSEC HRN Resolver",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-07-23T22:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4af94b39cba9fde969243bc3e00dc8d21681170",
"body": "This allows for giving a custom reqwest client when creating a\nHTTPHrnResolver. This is useful for adding custom headers, proxying\nconnections, etc. This also has the added benefit of using the same\nreqwest client across every call so it'll be better and reusing\ntls connections.",
"is_bot": false,
"headline": "Allow for custom HTTPHrnResolvers",
"author_name": "benthecarman",
"author_login": "benthecarman",
"committed_at": "2025-07-02T22:00:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e9af052604c2e7e44924c3d05203f1675165792",
"body": "Avoid assumption on unicode casing char length and LNURL override for bitcoin: URIs",
"is_bot": false,
"headline": "Merge pull request #8 from TheBlueMatt/main",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-07-02T17:38:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8460fd37eca15c53a27f6a4ae54860d5feaad7a1",
"body": "If we have a bitcoin: URI like `bitcoin:thing?lnurl=LNURL...` we\nreally shouldn't use the LNURL override to only resolve the\ninstructions as LNURL. Instead, we fall back to normal URI parsing.",
"is_bot": false,
"headline": "Avoid searching for LNURL override in bitcoin: URIs",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-07-02T16:35:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a4ad4a05973648d6476798ce1c52e448729597b",
"body": "When calling `instructions.to_lowercase().rfind(\"lnurl\")` and then\nusing the resulting value as a slice index in `instructions`, we\nimplicitly assume that any unicode lowercasing will not change the\nlength of any characters. That's probably fine in practice, but it\nseems like a weird assumption to make, so instead we swap it for\n`to_ascii_lowercase`.",
"is_bot": false,
"headline": "Use `to_ascii_lowercase` when checking for `lnurl` override start",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-07-02T16:34:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fdf0cf245d6a9970f6b6ff773e30ca25a62aaf5",
"body": "Previously I was hoping we could swap the dependency order between\nLDK and `bitcoin-payment-instructions`, but that turned out to be\nuntennable, so instead we should reuse the LDK `HumanReadableName`.",
"is_bot": false,
"headline": "Switch to LDK's `HumanReadableName` instead of our own",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-07-02T16:27:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6ef87ca11140189cfe9dd18fa30ae12a81707ad",
"body": " Implement parsing & resolving lnurls",
"is_bot": false,
"headline": "Merge pull request #2 from benthecarman/lnurl",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-07-02T16:26:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09e000ff71831fddf36b8f2a1b58d19658f721ba",
"body": null,
"is_bot": false,
"headline": "Implement parsing & resolving lnurls",
"author_name": "benthecarman",
"author_login": "benthecarman",
"committed_at": "2025-07-01T01:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfa2b0017483bb93fb488ed1cf5f9fa8d3083f97",
"body": "Add .gitignore + Clippy ci fixes",
"is_bot": false,
"headline": "Merge pull request #1 from benthecarman/ignore",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-04-25T21:13:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a651a6f85e4f7ecae1d08532d11c7d5af52816c",
"body": null,
"is_bot": false,
"headline": "Fix clippy ci",
"author_name": "benthecarman",
"author_login": "benthecarman",
"committed_at": "2025-04-24T18:02:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3807701aaed9fe6c7d936d8dd484ccb4775354d",
"body": null,
"is_bot": false,
"headline": "Add .gitignore",
"author_name": "benthecarman",
"author_login": "benthecarman",
"committed_at": "2025-04-24T17:35:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64a45f266b51fe8ae1fd5b3d610ad4c63207cc0e",
"body": null,
"is_bot": false,
"headline": "Bump version for new `HumanReadableName::new` API",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-04-12T21:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcd099e32cc4fcba7fa03364a839788b0ec307d0",
"body": "Since the full encoded domain name of an HRN cannot exceed the\nmaximum length of a DNS name (255 octets), there's not a lot of\nreason to store the `user` and `domain` parts of an HRN on the heap\nvia two `String`s.\n\nInstead, here, we store one byte array with the maximum size of\nboth labels as well a\n[…]\nin` parts.\n\nBecause we're now avoiding heap allocations this also implies\nmaking `HumanReadableName::new` take the `user` and `domain` parts\nby reference as `&str`s, rather than by value as `String`s.",
"is_bot": false,
"headline": "Store `HumanReadableName`s in-object rather than on the heap",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-04-12T21:40:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a1843e76ba3dab18db167e998c943c79610ab0f3",
"body": null,
"is_bot": false,
"headline": "Update `Cargo.toml` `repository` to point to new home",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-04-08T17:36:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e64898c272f4a839ecc276f98f85f93e570b593e",
"body": null,
"is_bot": false,
"headline": "Bump version for fixed docs",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-31T13:13:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2a7ff21ad50ee55400abdcc1dbe252acdf5ffe6",
"body": null,
"is_bot": false,
"headline": "Fix docs on `dns_resolver` module",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-31T13:13:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46136762680e3ae254497bc3e5f4e8df10bc11b5",
"body": null,
"is_bot": false,
"headline": "Bump version to 0.3",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-31T13:08:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "055d7c5300b18765bf668959e39e0113bb41bf15",
"body": null,
"is_bot": false,
"headline": "Improve fuzz test coverage by building a resolver",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-31T13:08:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d517ae0f7ddeb9cacb1506992e11b4901b40f1bf",
"body": null,
"is_bot": false,
"headline": "Make `Amount` construction API safe (by checking its <= 21M BTC)",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-31T13:08:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fe5f9e1c077ff1a6c82f937a2c54b1c348acd5b",
"body": "TIL you cannot index into `str`s safely as they panic if the index\nis not on a `char` bounary. Better, `split_at_checked` was only\nvery recently added so apparently I wasn't the only one who didn't\nknow this.",
"is_bot": false,
"headline": "Fix crash when slicing strings by slicing at non-char boundaries",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-31T00:24:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5540126302bd176d52ee6d71dc73d869bff23f2b",
"body": null,
"is_bot": false,
"headline": "Add fuzz infra and fuzz a bit in CI",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-31T00:09:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13473b3465d861664cc873c5e97b90c022780520",
"body": null,
"is_bot": false,
"headline": "Bump minor version for API rewrite",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-30T20:25:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3726dd320791b40e55441d858adf76769c83681",
"body": null,
"is_bot": false,
"headline": "Make clippy happy",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-30T20:25:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ec80a6f75377df98214ef234d5bda81d370a081",
"body": null,
"is_bot": false,
"headline": "Drop explicit `base64` dependency",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-30T20:20:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2594b7a497379029990c6941ff85de0336c76881",
"body": "In order to properly resolve LNURL-Pay/LN-Address HRNs, we need to\nhave the amount the wallet owner wishes to pay ready when we make\nthe second call to the LNURL-Pay endpoint. Sadly, this requires a\nfairly substantial API overhaul.\n\nInstead of being able to simply resolve a string into payment\ninstr\n[…]\n, the UI needs to\ndecide whether to display an amount selection dialog to the sender\nor a simple confirmation screen with a fixed amount. The new API\nmakes this decision a first-class part of the API.",
"is_bot": false,
"headline": "Rewrite crate to properly handle LNURL-Pay/LN-Address",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-30T19:43:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c030708b4a1ff3e8d5aba7c093499ccae8b6de43",
"body": null,
"is_bot": false,
"headline": "Deny redundant `pop` parameters",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-25T00:35:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c678440fadf2ba7db7aa31e362d3405c213f8d06",
"body": null,
"is_bot": false,
"headline": "Add a README",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T22:52:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33029770caa4c2a693359b6832b39ac780e93e2e",
"body": "Mostly tests copied from\nhttps://github.com/MutinyWallet/bitcoin-waila/blob/master/waila/src/lib.rs#L507\n\nTests modified somewhat by: Matt Corallo <git@bluematt.me>",
"is_bot": false,
"headline": "Add some initial tests",
"author_name": "benthecarman",
"author_login": "benthecarman",
"committed_at": "2025-03-23T21:55:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c608553051fbd450e8fcaf6b966673ce910c370c",
"body": "Because `PaymentInstructions::parse_payment_instructions` is very\nreundant.",
"is_bot": false,
"headline": "Rename `parse_payment_instructions` to `parse`",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T21:54:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd3a3526490b5ae3f5dbeb151ccc3f50b0c1f7d8",
"body": null,
"is_bot": false,
"headline": "Fix `no-std` builds",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T20:29:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "459b91d320977c12c8fccbaa0ec7adcadde030ca",
"body": "Previously it would check if the address started with bc1 to see\nif it is segwit. This however will fail for networks other than\nmainnet.\n\nThis fixes it by parsing `tb1*` addresses in `tb` parameters.",
"is_bot": false,
"headline": "Fix segwit address param parsing for test networks",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T19:59:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5506128f55a74a1dd1b6db9a0ee719162e3ca500",
"body": null,
"is_bot": false,
"headline": "Bump to 0.1.0",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T02:01:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8da6a2bc670956f6c2909b4f22e4f7de3d5e0fc5",
"body": null,
"is_bot": false,
"headline": "Add CI",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T02:01:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca41f1d9b035b8f2abc80f70704295f53dc137b4",
"body": null,
"is_bot": false,
"headline": "Fix various clippy lints",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T01:55:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cce75d5606e20efecbf6e9f6b62d322d78fa727",
"body": null,
"is_bot": false,
"headline": "Add LN-Address resolution to `http_resolver`",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T01:35:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "597829c767387f89a7e17872285322a5434c4475",
"body": null,
"is_bot": false,
"headline": "Add additional privacy warnings",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T01:13:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aed035ded4e3070acc304be7908f5f577552de1d",
"body": null,
"is_bot": false,
"headline": "Check lightning instruction expiry",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T01:11:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e73eee39c6f727308cfe65554f6488a9db238954",
"body": null,
"is_bot": false,
"headline": "Parse fallback on-chain addresses out of BOLT 11 invoices",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T01:11:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2227c7abe8f7500ef8c79c16681d4d7901e563da",
"body": null,
"is_bot": false,
"headline": "Add a native DNS resolver that handles BIP 353 resolution",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T01:11:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "506a5d46442a3f6b62e7ff277ac6369e9a89476b",
"body": null,
"is_bot": false,
"headline": "Drop unfinished `LDKOnionMessageDNSSECHrnResolver`",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T01:11:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "675e014f769668e4f8debc62ffe637b3a298fb3d",
"body": null,
"is_bot": false,
"headline": "Clean up receive instruction parsing, fixing a bug and `rustfmt`",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T00:25:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3900b3b20cbb717eaf15c2a4ec4350181bbbd35b",
"body": null,
"is_bot": false,
"headline": "Add `From<bitcoin::Amount> for Amount`",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T00:22:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1482760394a22028b84d91b95aedcf492ca6fff",
"body": null,
"is_bot": false,
"headline": "Move payment instructions into its own repo from `libbtcwallet`",
"author_name": "Matt Corallo",
"author_login": "TheBlueMatt",
"committed_at": "2025-03-23T00:16:53Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 9,
"commits_last_year": 38,
"latest_release_at": "2026-01-21T13:07:39Z",
"latest_release_tag": "v0.7.0",
"releases_from_tags": true,
"days_since_last_push": 4,
"active_weeks_last_year": 12,
"days_since_latest_release": 185,
"mean_days_between_releases": 38.1
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "bitcoin-payment-instructions",
"exists": true,
"license": "MIT OR Apache-2.0",
"keywords": [],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/bitcoin-payment-instructions",
"is_deprecated": false,
"latest_version": "0.7.1",
"repository_url": "https://github.com/rust-bitcoin/bitcoin-payment-instructions",
"versions_count": 12,
"total_downloads": 93104,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 17256,
"first_published_at": "2025-03-19T21:35:58.438717Z",
"latest_published_at": "2026-07-25T00:43:26.933565Z",
"latest_version_yanked": false,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 16,
"stars": 12,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2025-04-09",
"count": 1
},
{
"date": "2025-04-24",
"count": 1
},
{
"date": "2025-05-06",
"count": 1
},
{
"date": "2025-06-29",
"count": 1
},
{
"date": "2025-09-02",
"count": 1
},
{
"date": "2025-09-22",
"count": 1
},
{
"date": "2025-10-02",
"count": 1
},
{
"date": "2025-10-24",
"count": 1
},
{
"date": "2026-01-16",
"count": 1
},
{
"date": "2026-01-20",
"count": 1
},
{
"date": "2026-03-13",
"count": 1
},
{
"date": "2026-03-19",
"count": 1
},
{
"date": "2026-06-09",
"count": 1
}
],
"complete": true,
"collected": 13,
"total_forks": 16
},
"star_history": null,
"open_issues_and_prs": 3
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml",
"fuzz/Cargo.toml"
],
"largest_source_bytes": 70670,
"source_files_sampled": 16,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml",
"fuzz/Cargo.toml"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "lightning-invoice",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.34"
},
{
"name": "lightning",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.2.0"
},
{
"name": "bitcoin",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.32"
},
{
"name": "getrandom",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.3"
},
{
"name": "dnssec-prover",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.6"
},
{
"name": "bitreq",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.3"
},
{
"name": "serde",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "serde_json",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 17,
"open_issues": 1,
"closed_ratio": 0.75,
"closed_issues": 3,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "TheBlueMatt",
"commits": 72,
"avatar_url": "https://avatars.githubusercontent.com/u/649246?v=4"
},
{
"type": "User",
"login": "benthecarman",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/15256660?v=4"
},
{
"type": "User",
"login": "andrei-21",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/92177534?v=4"
},
{
"type": "User",
"login": "chuksys",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/11191390?v=4"
},
{
"type": "User",
"login": "thesimplekid",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/8606367?v=4"
}
],
"contributors_sampled": 5,
"top_contributor_share": 0.847
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"build.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 3,
"reason": "3 out of 9 merged PRs checked by a CI test -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 8,
"reason": "Found 8/10 approved changesets -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project is archived",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "be199a9c9f904d3289dc2dc1811d960c39f4c8b1",
"ran_at": "2026-07-25T15:08:29Z",
"aggregate_score": 4.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T21:24:17Z",
"oldest_open_prs": [
{
"number": 23,
"created_at": "2026-05-04T16:56:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 26,
"created_at": "2026-06-09T20:04:00Z",
"last_comment_at": "2026-06-10T14:02:07Z",
"last_comment_author": "nyonson"
}
],
"last_merged_pr_at": "2026-07-20T21:20:52Z",
"ci_last_conclusion": "CANCELLED",
"oldest_open_issues": [
{
"number": 4,
"created_at": "2025-06-25T13:04:35Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/rust-bitcoin/bitcoin-payment-instructions",
"host": "github.com",
"name": "bitcoin-payment-instructions",
"owner": "rust-bitcoin"
},
"metrics": {
"overall": {
"key": "overall",
"band": "critical",
"name": "Overall health",
"note": "Abandonment Policy applies a 40% multiplier to weighted overall health and gives it a ceiling of 29.",
"notes": [
{
"code": "abandonment_overall_adjustment",
"params": {
"cap": 29,
"pct": 40
}
}
],
"value": 20,
"inputs": {
"security": 41,
"vitality": 62,
"community": 38,
"governance": 65,
"engineering": 44,
"abandonment_cap": 29,
"abandonment_state": "declared",
"abandonment_multiplier": 40,
"weighted_overall_before_abandonment": 51,
"overall_after_abandonment_multiplier": 20
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 62,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 38,
"human_commit_share": 1,
"days_since_last_push": 4,
"active_weeks_last_year": 12
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "12/52 weeks with commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 12
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "38 commits in the last year",
"points": 14.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 38
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project is archived",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "moderate",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"releases_count": 9,
"latest_release_tag": "v0.7.0",
"releases_from_tags": true,
"days_since_latest_release": 185,
"mean_days_between_releases": 38.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "9 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 9
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 185 days ago",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 185
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~38.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 38.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "at_risk",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"cap": 29,
"state": "declared",
"guards": [],
"signals": [],
"red_flag": true,
"multiplier_pct": 40,
"declared_reason": "archived",
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "the repository is archived on GitHub",
"points": 40,
"status": "partial",
"details": [
{
"code": "abandonment_archived",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 38,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"forks": 16,
"stars": 12,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "12 stars",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 12
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "16 forks",
"points": 9.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 16
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 71,
"inputs": {
"packages": [
"bitcoin-payment-instructions"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 93104,
"monthly_downloads": 17256
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "17,256 downloads/month across crates",
"points": 56.5,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 17256,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 65,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 5,
"top_contributor_share": 0.847
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 85% of commits",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 85
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "5 contributors",
"points": 6.8,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 5
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"merged_prs": 17,
"open_issues": 1,
"closed_issues": 3,
"issue_closed_ratio": 0.75,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "75% of issues closed",
"points": 35.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 75
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "17/20 decided PRs merged",
"points": 32.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 17,
"decided": 20
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 8/10 approved changesets -- score normalized to 8",
"points": 12,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"followers": 558,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "rust-bitcoin",
"public_repos": 32,
"account_age_days": 3063
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "558 followers of rust-bitcoin",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 558,
"login": "rust-bitcoin"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "32 public repos, account ~8 yr old",
"points": 23.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 32
}
},
{
"code": "account_age_years",
"params": {
"years": 8
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"bitcoin-payment-instructions"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "12 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 12
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 44,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "3 out of 9 merged PRs checked by a CI test -- score normalized to 3",
"points": 6,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://git.rust-bitcoin.org/rust-bitcoin/bitcoin-payment-instructions",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://git.rust-bitcoin.org/rust-bitcoin/bitcoin-payment-instructions",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 41,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "3 out of 9 merged PRs checked by a CI test -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 8/10 approved changesets -- score normalized to 8",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project is archived",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 36,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 23,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.435,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "37 of 85 human commits state their intent (structured subject or explanatory body)",
"points": 23.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 37,
"sampled": 85
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"Cargo.toml",
"fuzz/Cargo.toml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Cargo.toml, fuzz/Cargo.toml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "Cargo.toml, fuzz/Cargo.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 85",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 85
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 93,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 70670,
"source_files_sampled": 16,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/16 source files over 60KB",
"points": 48.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 16,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index crates:bitcoin-payment-instructions@0.7.1; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-25T15:08:44.780657Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/rust-bitcoin/bitcoin-payment-instructions.svg",
"full_name": "rust-bitcoin/bitcoin-payment-instructions",
"license_state": "absent",
"license_spdx": null
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with rust-bitcoin/bitcoin-payment-instructions. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
