Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-25 14:30 UTC
snnabb / Meridian
轻量级 Emby 反向代理管理面板 Apple TV 风格 UI
snnabb/Meridian holds a health index of 57 out of 100, placing it in the Moderate band. It scores highest on Vitality (74/100) and lowest on Sustainability & Governance (20/100). It was last updated 2 days ago. A single contributor accounts for most of its recent work.
57
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
57
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
snnabbPersonal account
0 followers17 public repossince Dec 2022
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
74
Development activity
63Moderate
How it's scored
| 36/36 | Push recency — last push 2 days ago |
| 2.1/36 | Commit cadence — 3/52 weeks with commits |
| 15/18 | Commit volume — 46 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 18 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 46 |
| human_commit_share | 1 |
| days_since_last_push | 2 |
| active_weeks_last_year | 3 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 12 releases published |
| 36/36 | Release recency — latest release 2 days ago |
| 27/27 | Release cadence — a release every ~12.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 12 |
| latest_release_tag | v1.5.1 |
| releases_from_tags | no |
| days_since_latest_release | 2 |
| mean_days_between_releases | 12.8 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
61
Popularity & adoption
47At risk
How it's scored
| 35.9/60 | Stars — 164 stars |
| 10.7/25 | Forks — 20 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 20 |
| stars | 164 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
77Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | yes |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
20
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
18Critical
How it's scored
| 11.7/46.8 | Issue resolution — 25% of issues closed |
| 6.4/38.3 | PR acceptance — 1/6 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 1 |
| open_issues | 3 |
| closed_issues | 1 |
| issue_closed_ratio | 0.25 |
| closed_unmerged_prs | 5 |
Ownership & stewardship
33At risk
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 0/25 | Owner reach — 0 followers of snnabb |
| 16.4/25 | Track record — 17 public repos, account ~3 yr old |
Inputs used
| followers | 0 |
| owner_type | User |
| is_verified | — |
| owner_login | snnabb |
| public_repos | 17 |
| account_age_days | 1,326 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Engineering Quality
Are baseline engineering and documentation practices in place?
71
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 3 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
75Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
65
Security posture
65Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 18 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 4/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8 |
| 3.5/5 | SAST — SAST tool detected but not run on all commits |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 6/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 18 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 0 |
| scorecard_aggregate | 6.5 |
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
63
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 37 of 46 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.804 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
69Moderate
How it's scored
| 12.6/18 | One-command bootstrap — go.mod (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 46 |
| 5/8 | Automated maintenance — dependency automation configured, none observed in the sampled commits |
| 8/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
94Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 48.5/55 | Manageable file sizes — 2/17 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 92,985 |
| source_files_sampled | 17 |
| oversized_source_files | 2 |
Key facts
164GitHub stars
1contributors
46commits, last 12 months
2days since last push
12releases
1bus factor
3open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 20 ⇿
0Stars
20Forks
10Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 3Patch 7
OpenSSF Scorecard 6.5 / 10
6.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 1 out of 1 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 18 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 8 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 8 |
| 7 | SAST | SAST tool detected but not run on all commits |
| 10 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 8 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 2
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/go-crypt/x | v0.4.16 | go.mod |
| Go | modernc.org/sqlite | v1.47.0 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 688,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 181080,
"CSS": 26537,
"HTML": 4649,
"Shell": 62725,
"Dockerfile": 883,
"JavaScript": 57730
},
"pushed_at": "2026-07-23T11:50:40Z",
"created_at": "2026-03-26T12:56:36Z",
"owner_type": "User",
"updated_at": "2026-07-25T05:17:27Z",
"description": "轻量级 Emby 反向代理管理面板 Apple TV 风格 UI",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go",
"Shell",
"JavaScript"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "snnabb",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/119995372?v=4",
"created_at": "2022-12-07T03:55:57Z",
"is_verified": null,
"public_repos": 17,
"account_age_days": 1326
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2026-07-23T11:53:38Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-07-22T09:25:08Z"
},
{
"tag": "v1.4.3",
"kind": "patch",
"published_at": "2026-07-22T04:32:35Z"
},
{
"tag": "v1.4.2",
"kind": "patch",
"published_at": "2026-07-22T02:22:09Z"
},
{
"tag": "v1.4.1",
"kind": "patch",
"published_at": "2026-07-18T05:07:47Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-04-03T09:26:00Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2026-04-01T05:15:24Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-03-31T07:54:34Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-03-30T15:31:48Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-03-30T15:19:11Z"
},
{
"tag": "v1.2",
"kind": "other",
"published_at": "2026-03-29T16:01:41Z"
},
{
"tag": "v1.1",
"kind": "other",
"published_at": "2026-03-27T16:12:55Z"
}
],
"recent_commits": [
{
"oid": "8e377be16858f9292e85e065a7357477549c67b5",
"body": null,
"is_bot": false,
"headline": "ci: add custom UA frontend checks",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-23T11:45:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3604390410ebe1e8156fea3f1bd575332cdb505f",
"body": null,
"is_bot": false,
"headline": "feat: add per-site custom UA profiles",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-23T11:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9584849e08f8f600fdcc50bf4161912140da199a",
"body": null,
"is_bot": false,
"headline": "test: handle protected installer paths",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-22T09:00:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31563b45726f0550d2ea827a028fbc6163372d09",
"body": null,
"is_bot": false,
"headline": "test: make installer fixtures unprivileged",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-22T08:51:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fe5b2d2db24cf94fdbf665c735e25e2e380f510",
"body": null,
"is_bot": false,
"headline": "feat: simplify installer and secure panel setup",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-22T08:44:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0bb161cc11cde4e6444a53a6ebc67e7b7d4fdcc",
"body": null,
"is_bot": false,
"headline": "test: support restricted backup permissions",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-22T03:55:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1cb436a7e57a9c082aef3ce1b88771d86183f94",
"body": null,
"is_bot": false,
"headline": "feat: expand installer and remove vulnerable crypto module",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-22T03:41:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "725df54acec1dc215d6a2141acf714f076e82340",
"body": null,
"is_bot": false,
"headline": "fix: preserve site speed limits and prepare v1.4.2",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-22T02:10:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7625da89fba8256265e7c42227e0fd292eb07e35",
"body": null,
"is_bot": false,
"headline": "security: make runtime filesystem immutable",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-21T16:47:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "982ab611ce0903583ecf9ee1bb5bd5469c5ea1a4",
"body": null,
"is_bot": false,
"headline": "fix: improve proxy stability and diagnostics",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-21T16:47:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d421e763a878f5557dbf43f084e0cee1331867c",
"body": null,
"is_bot": false,
"headline": "security: rebuild trusted proxy headers",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-21T16:17:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78f5a225b16ad5c32f075b03d18bbcd7f1469846",
"body": null,
"is_bot": false,
"headline": "fix: follow custom playback redirects",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-21T15:36:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d154c89904ef5860c16424b63201b9bae420090d",
"body": null,
"is_bot": false,
"headline": "security: harden upstream routing and client handling",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-21T15:02:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1da0a4bb964a044d7d79a8e4dad45f1892a7d373",
"body": null,
"is_bot": false,
"headline": "fix: preserve site form on backdrop click",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-21T13:28:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e11b7ffdd8d40507e6f18677298696d775414738",
"body": null,
"is_bot": false,
"headline": "security: restrict database file permissions",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-21T11:53:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f319a3d29958e15b713b54a6259ef62cb24626bd",
"body": null,
"is_bot": false,
"headline": "fix: improve mobile site form and https redirects",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-21T05:01:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee0cd1319f35163ae9e5f309bc6e89f4ad39af2a",
"body": null,
"is_bot": false,
"headline": "security: harden authentication proxy and deployment",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-21T03:01:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0d12826b83b6bc9575e6aacac171d1bbd10fc7e",
"body": "修正版本号注入，并在诊断页脚本加载失败时提供降级提示。",
"is_bot": false,
"headline": "修复版本显示与诊断页加载异常 (#5)",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-07-18T05:05:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "948f6ba33e40c86cfad521c5ab5737aed331c741",
"body": "Allow sites to configure multiple playback origins instead of just one.\nIn redirect mode, Meridian now follows redirects to any host in the list.\n\n- DB: add stream_hosts column (JSON array of extra playback URLs)\n- Backend: redirectFollowTransport matches against host set instead of single host\n- Frontend: replace single playback input with dynamic add/remove list\n- Tests: update all CreateSite calls for new parameter",
"is_bot": false,
"headline": "Add multi-host playback support (stream_hosts)",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-04-03T09:25:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2465150b424d2e3beea354621fd7f18554eee423",
"body": null,
"is_bot": false,
"headline": "Add community links to README",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-04-03T05:26:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "695532bbbaec361498275cd1e3e6119f72c6b68f",
"body": null,
"is_bot": false,
"headline": "Bump version to v1.3.1",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-04-01T05:13:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "114de27d3503fb9fdaf874975367aa1af310408a",
"body": null,
"is_bot": false,
"headline": "Add Meridian favicon and topnav icon",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-04-01T04:59:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "862bf525ffdde296b6dbb6aa5b9597f0b96b6bf7",
"body": "Some Emby setups use CDN nodes that only accept signed URLs issued by\nthe primary server (e.g. miraiemby). The existing direct-split mode\nsends /Videos/ requests straight to the CDN, which rejects them.\n\nNew \"redirect\" playback mode sends all requests to the primary and\ntransparently follows 302/307\n[…]\ntable\n- Add redirectFollowTransport that internally follows redirects\n- StartSite respects mode for both HTTP proxy and WebSocket routing\n- Frontend shows mode selector when playback URL is configured",
"is_bot": false,
"headline": "Add redirect-follow playback mode for CDN-signed upstreams",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-31T07:54:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3b28abce9ecb3f630bdee4fbb5fa1aa765e520b2",
"body": null,
"is_bot": false,
"headline": "Add regression tests for UA version spoofing",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-30T15:46:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cce02e8b509ef283deb42a356e95ef12afe7b5a",
"body": "Add version_field to DiagHeaders so the diagnostics page displays\nthe masqueraded client version alongside the existing UA and Client\nfields.",
"is_bot": false,
"headline": "Show spoofed version in diagnostics panel",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-30T15:26:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57641dd7515b96941d1071f727f7df0a83cf068f",
"body": "The Version= field in X-Emby-Authorization / Authorization was not\nbeing rewritten, exposing the real client version even when UA spoofing\nwas enabled.",
"is_bot": false,
"headline": "Fix UA masquerade leaking real client version in auth headers",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-30T15:17:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a5405f871c675bfef9a20a3f127367d65d8036d",
"body": null,
"is_bot": false,
"headline": "Refresh README screenshots for v1.2",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-30T05:19:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21c99ccf9dfce94ce9b16d108b299728217ab572",
"body": null,
"is_bot": false,
"headline": "Bump version to v1.2",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-29T15:59:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df55d704042c3d3388931060f6ca974fc3786b4b",
"body": null,
"is_bot": false,
"headline": "Polish v1 single-admin UX and docs",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-29T15:51:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09e2fc04e33291c7e89c3138ab4f74d94015b8b7",
"body": null,
"is_bot": false,
"headline": "Refine split upstream diagnostics probes",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-29T14:54:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4527a2f036623f16784bea3ab1e6a3dc53d01756",
"body": null,
"is_bot": false,
"headline": "Align diagnostics with split upstreams",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-29T14:14:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cde0c8d2fe6ce6d1c45cfb39e404eb5c16be870",
"body": null,
"is_bot": false,
"headline": "fix: update GitHub actions for Node24",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-28T06:08:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07834f4dc3101941ab4444bfe23dd66b2c87b624",
"body": null,
"is_bot": false,
"headline": "fix: tighten GitHub workflows and docs",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-27T16:08:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af8e78ff9151664ce3fc592587e4f426b4390976",
"body": null,
"is_bot": false,
"headline": "docs: align Meridian naming and release config",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-27T15:48:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "663031ba6153e539b426af8ee596898ea135bc4a",
"body": "- 新增 install.sh：交互式菜单，支持安装/更新/卸载\n - 自动检测 linux/darwin + amd64/arm64\n - 自动生成 JWT_SECRET 和 .env 配置\n - 自动配置 systemd 服务\n - 卸载时可选是否保留数据\n- 所有 GitHub URL 从 snnabb/emby-panel 更新为 snnabb/meridian\n- README 部署区块简化，一行命令即可完成安装",
"is_bot": false,
"headline": "feat: 交互式安装脚本 + 仓库 URL 更新",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-27T15:26:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f2551c6fc5dcd7e6be4afb3daca2278a461b6a5",
"body": "全面更名为 Meridian，覆盖所有代码和文档：\n- Go module name: meridian\n- 二进制产物名: meridian\n- 前端标题/品牌: Meridian\n- localStorage key 前缀: meridian_\n- 默认数据库文件名: meridian.db\n- CI 产物名: meridian-{platform}\n- 启动/关闭日志\n- 所有文档（README/CONTRIBUTING/SECURITY/Issue 模板）\n\nGitHub 仓库 URL 保持 snnabb/emby-panel 不变，待 GitHub 侧 rename 后再更新",
"is_bot": false,
"headline": "rename: EmbyHub → Meridian",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-27T15:22:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fefaae4a38101f8a859e685de4e296bf2c730e3",
"body": "- 截图改为三列表格并排展示，不再折叠隐藏\n- 顶部居中标题 + badge 标签\n- 新增一键部署区块：Docker / 二进制下载 / 源码构建均有即复即用命令\n- 修正 GitHub URL 为实际仓库地址 snnabb/emby-panel\n- 诊断说明改为表格对比格式，更清晰\n- 核心特性改为表格排版",
"is_bot": false,
"headline": "docs: 优化 README 展示效果",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-27T15:15:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa645c4f122f9cd648d65716da1614b1b1ca5969",
"body": "- README.md 全面重写为中文，覆盖架构、部署、双上游、诊断边界说明\n- 新增 CONTRIBUTING.md 贡献指南\n- 新增 SECURITY.md 安全策略\n- 新增 Issue 模板（Bug 报告 / 功能建议）\n- 新增 PR 模板",
"is_bot": false,
"headline": "docs: 重写中文文档体系，补齐 GitHub 配套文件",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-27T15:09:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1fd3e9033453db03075b5756e1d356b5a3ff836",
"body": null,
"is_bot": false,
"headline": "fix: improve upstream diagnostics and ua reporting",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-27T14:50:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8aeba823713a0d72c9317264b7d1169e16d5fc15",
"body": null,
"is_bot": false,
"headline": "feat: support split playback upstreams",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-27T14:04:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b4215ea2d4397037798610d48d4201e7c7e9a1d",
"body": null,
"is_bot": false,
"headline": "fix: improve site modal UX",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-27T13:37:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d0ae9ef6c8ef5db9b0b618e005a6d7d16720d86",
"body": null,
"is_bot": false,
"headline": "fix: harden proxy lifecycle and auth handling",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-27T09:18:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "badbba91ed701f41d29a597858d6365598f03713",
"body": null,
"is_bot": false,
"headline": "fix: clean up frontend auth lifecycle",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-26T14:36:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80e8b440b3fcac32af19fe9a0565a2c453d2178c",
"body": null,
"is_bot": false,
"headline": "feat: SSE real-time dashboard live uptime, counters, request tracker",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-26T13:57:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c185c2a974798ecab6a9f9a20d37342392562d6e",
"body": "…tdown, Docker, CI",
"is_bot": false,
"headline": "feat(v1.1): WebSocket proxy, traffic quota, speed limit, graceful shu…",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-26T13:12:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afae6059dc6bcea02b596213d9c37c1a7c7ee0e4",
"body": null,
"is_bot": false,
"headline": "feat: EmbyHub v1.0 Emby 反代管理面板",
"author_name": "snnabb",
"author_login": "snnabb",
"committed_at": "2026-03-26T12:54:40Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 12,
"commits_last_year": 46,
"latest_release_at": "2026-07-23T11:53:38Z",
"latest_release_tag": "v1.5.1",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 3,
"days_since_latest_release": 2,
"mean_days_between_releases": 12.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 20,
"stars": 164,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-03-30",
"count": 4
},
{
"date": "2026-03-31",
"count": 3
},
{
"date": "2026-04-01",
"count": 1
},
{
"date": "2026-04-03",
"count": 1
},
{
"date": "2026-04-07",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-04-19",
"count": 1
},
{
"date": "2026-05-14",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-07-03",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
},
{
"date": "2026-07-25",
"count": 1
}
],
"complete": true,
"collected": 20,
"total_forks": 20
},
"star_history": null,
"open_issues_and_prs": 9
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 92985,
"source_files_sampled": 17,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/go-crypt/x",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.16"
},
{
"name": "modernc.org/sqlite",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.47.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 6,
"merged_prs": 1,
"open_issues": 3,
"closed_ratio": 0.25,
"closed_issues": 1,
"closed_unmerged_prs": 5
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "snnabb",
"commits": 46,
"avatar_url": "https://avatars.githubusercontent.com/u/119995372?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"codeql.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "18 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 8,
"reason": "dependency not pinned by hash detected -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 7,
"reason": "SAST tool detected but not run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 8,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "8e377be16858f9292e85e065a7357477549c67b5",
"ran_at": "2026-07-25T14:30:37Z",
"aggregate_score": 6.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-23T11:54:17Z",
"oldest_open_prs": [
{
"number": 4,
"created_at": "2026-07-07T06:34:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 8,
"created_at": "2026-07-22T01:31:52Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 12,
"created_at": "2026-07-22T01:32:05Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 14,
"created_at": "2026-07-23T05:24:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 15,
"created_at": "2026-07-23T05:24:29Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 16,
"created_at": "2026-07-23T05:24:37Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-18T05:05:41Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 1,
"created_at": "2026-04-06T18:55:11Z",
"last_comment_at": "2026-07-18T05:12:59Z",
"last_comment_author": "snnabb"
},
{
"number": 2,
"created_at": "2026-04-08T04:03:19Z",
"last_comment_at": "2026-07-18T05:13:49Z",
"last_comment_author": "snnabb"
},
{
"number": 13,
"created_at": "2026-07-22T08:43:31Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/snnabb/Meridian",
"host": "github.com",
"name": "Meridian",
"owner": "snnabb"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 65,
"vitality": 74,
"community": 61,
"governance": 20,
"engineering": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 74,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"commits_last_year": 46,
"human_commit_share": 1,
"days_since_last_push": 2,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "46 commits in the last year",
"points": 15,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 46
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "18 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 12,
"latest_release_tag": "v1.5.1",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 12.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "12 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 12
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~12.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 12.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 61,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"forks": 20,
"stars": 164,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "164 stars",
"points": 35.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 164
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "20 forks",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 20
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "critical",
"name": "Sustainability & Governance",
"value": 20,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 18,
"inputs": {
"merged_prs": 1,
"open_issues": 3,
"closed_issues": 1,
"issue_closed_ratio": 0.25,
"closed_unmerged_prs": 5
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "25% of issues closed",
"points": 11.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 25
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1/6 decided PRs merged",
"points": 6.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1,
"decided": 6
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 33,
"inputs": {
"followers": 0,
"owner_type": "User",
"is_verified": null,
"owner_login": "snnabb",
"public_repos": 17,
"account_age_days": 1326
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of snnabb",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "snnabb"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "17 public repos, account ~3 yr old",
"points": 16.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 17
}
},
{
"code": "account_age_years",
"params": {
"years": 3
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 65,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 6.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "18 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected but not run on all commits",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 63,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.804,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "37 of 46 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 37,
"sampled": 46
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 46",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 46
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "dependency automation configured, none observed in the sampled commits",
"points": 5,
"status": "partial",
"details": [
{
"code": "dependency_bot_config_only",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 92985,
"source_files_sampled": 17,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/17 source files over 60KB",
"points": 48.5,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 17,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T14:30:42.487171Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/snnabb/Meridian.svg",
"full_name": "snnabb/Meridian",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.