toland/patron holds a health index of 56 out of 100, placing it in the Moderate band. It scores highest on Community & Adoption (66/100) and lowest on Security (43/100). It was last updated 29 days ago. A single contributor accounts for most of its recent work.
56
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
56
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — 2 affected: yard 0.8.7.6 (high 7.5), rake 10.4.2 (moderate 6.4)
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
29.7/40
No advisories left outstanding — 2 advisory-carrying package(s) unaddressed past 90 days; oldest published 3,134 days ago
Inputs used
source
osv
advisories
7
affected_packages
3
assessed_packages
13
unassessed_packages
0
affected_by_severity
high 2, moderate 1
direct_affected_packages
2
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 13 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 1/26 source files over 60KB
Inputs used
primary_language
C
largest_source_bytes
72,754
source_files_sampled
26
oversized_source_files
1
Key facts
547GitHub stars
37contributors
3commits, last 12 months
29days since last push
2releases
1bus factor
6open issues
RubyGemspackage ecosystems
More detail
Star and fork history 547 ★ / 74 ⇿
547Stars
74Forks
2Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 2
Each point covers 16 days.
OpenSSF Scorecard 4.0 / 10
4.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-22 00:18 UTC
Full resolved dependency set from the GitHub dependency graph: 5 direct and 8 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
RubyGems
rake
10.4.2
direct
RubyGems
rake-compiler
0.9.5
direct
RubyGems
rspec
3.3.0
direct
RubyGems
simplecov
0.14.1
direct
RubyGems
yard
0.8.7.6
direct
RubyGems
diff-lcs
1.2.5
indirect
RubyGems
docile
1.1.5
indirect
RubyGems
json
2.1.0
indirect
RubyGems
rspec-core
3.3.2
indirect
RubyGems
rspec-expectations
3.3.1
indirect
RubyGems
rspec-mocks
3.3.2
indirect
RubyGems
rspec-support
3.3.0
indirect
RubyGems
simplecov-html
0.10.1
indirect
Dependency advisories 3
This repository publishes no package the index resolves, so its own dependency graph was assessed — 13 packages, which also include development and test pins that never ship: 3 carry known advisories, of which 2 are direct.
Package
Version
Relation
Severity
Advisories
Fixed in
yard
0.8.7.6
direct
high
5
0.9.44
json
2.1.0
indirect
high
1
2.3.0
rake
10.4.2
direct
moderate
1
12.3.3
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 621,
"has_wiki": true,
"homepage": "http://toland.github.com/patron/",
"languages": {
"C": 114727,
"Ruby": 105669
},
"pushed_at": "2026-06-22T10:08:26Z",
"created_at": "2009-06-23T17:14:12Z",
"owner_type": "User",
"updated_at": "2026-06-22T10:08:31Z",
"description": "Ruby HTTP client based on libcurl",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "C",
"significant_languages": [
"C",
"Ruby"
]
},
"owner": {
"blog": null,
"name": "Aeryn Riley Dowling-Toland",
"type": "User",
"login": "toland",
"company": null,
"location": "Toronto, ON",
"followers": 108,
"avatar_url": "https://avatars.githubusercontent.com/u/4746?v=4",
"created_at": "2008-04-03T21:58:07Z",
"is_verified": null,
"public_repos": 22,
"account_age_days": 6683
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.4.20",
"kind": "patch",
"published_at": "2014-07-24T22:28:56Z"
},
{
"tag": "v0.4.19",
"kind": "patch",
"published_at": "2014-07-23T21:15:34Z"
}
],
"recent_commits": [
{
"oid": "57be48b5ce5ff2260be180333039ca137ed21410",
"body": "* CI: add Ruby head as an informational (allow-failure) build\n\nAdd `head` to the test matrix so we get early warning of breakage on\nupcoming Ruby, while keeping it non-blocking via continue-on-error.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n* Bump dev dependency puma to ~> 5.6 so th\n[…]\nhe file intact. This is server-agnostic and immune to the puma de-chunking.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "CI: add Ruby head as an informational build (#201)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2026-06-22T10:08:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3d7cb7b0e70d2137068f21324925501f8033300c",
"body": "* Mark progress callback\n* Use ruby_xfree for session state\n* Avoid GVL callback casts\n\nThis extension already assumes Ruby 2.3 or later and uses\nrb_thread_call_with_gvl/rb_thread_call_without_gvl unconditionally, so\ndeclare the same minimum Ruby version in the gemspec.\n\nRuby 2.3 ships with RubyGems\n[…]\nrom the obsolete 1.2.0 floor.\n\n* Use typed data for sessions\n\nPatron already assumes Ruby 2.3 or later for the GVL APIs, so\nTypedData_Make_Struct and TypedData_Get_Struct can be used without\nfallback.",
"is_bot": false,
"headline": "Fix for Ruby 4.1 and old bugs (#199)",
"author_name": "Nobuyoshi Nakada",
"author_login": "nobu",
"committed_at": "2026-06-09T09:40:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1fdb33cc101afdd345b6c50bfe909a11b3085ae9",
"body": "Test less versions so that we run less CI time, add 4.0.5 to support upcoming update. Add ostruct dep as it has been gemified.",
"is_bot": false,
"headline": "Update CI Ruby versions, add 4.0.5 (#200)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2026-06-06T16:33:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26866451f4d279ca3d9a56adef6ce3f0b8a67e83",
"body": "* Change version back to what is on Rubygems\n\nVersion progress and tags would otherwise be disrupted. Besides, Patron is not \"alpha\" anymore, by far.\n\n* Bump version\n* Update CHANGELOG with all the new goodness\n\nof the last 5 years :facepalm:\n\n* Add 3.4.1 to test matrix\n\n* Make the RNG more lightwei\n[…]\nno need to seed a new RNG for every byte bag served out\n\n* Use Tempfiles in get_file tests\n\nWe should not be managing those manually, and that's what Tempfiles are for\n\n* Update author name in gemspec",
"is_bot": false,
"headline": "Prepare 0.13.4 for release (#197)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2025-02-27T21:58:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f878b3c3fe2869a034ba2a7803eaf6bb2916247",
"body": "as it has been removed from stdlib",
"is_bot": false,
"headline": "Explicitly depend on base64 for dev",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2025-02-26T01:29:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b3dbd00c47d9bb7e0512a4a42ec51166fde60f7",
"body": "Adds Ruby 3.2, 3.3 to test matrix\r\n\r\n...and updates actions/checkout to latest release.\r\n\r\n...and adds `webrick` to `Gemfile` for testing purposes.\r\n\r\n...and chooses rack-2.2 for Ruby 3.3.\r\n\r\n## Test failures fixed\r\n\r\n<details>\r\n\r\nPuma and rack and rackup are running older versions, so they're compa\n[…]\nt was ` match = Regexp.new(\"^#{Regexp.quote(location).gsub('/', '/+')}(.*)\", nil, 'n')` in Rack::URLMap! \r\n\r\n</details>\r\n\r\nSolution: make it possible to pick a slightly newer Rack for Ruby 3.3.",
"is_bot": false,
"headline": "CI: add Ruby 3.2, 3.3, and fix builds (#195)",
"author_name": "Olle Jonsson",
"author_login": "olleolleolle",
"committed_at": "2024-08-28T14:17:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f5290598fee51cc56498b5d00d519727c769ddb2",
"body": "d297b12fb89afeea5398f1600c15db7c2935d80b introduced eager curl handle initialization and its further reusage to leverage from connection caching.\r\n\r\nIt's definitely a movement into right direction but current code has a problem: it removes all the presets from the handle with `curl_easy_reset` (thou\n[…]\nady be applied and less work needs to be done on each request.\r\n\r\nHandle duplication: https://curl.se/libcurl/c/curl_easy_duphandle.html\r\nShared objects: https://curl.se/libcurl/c/curl_share_init.html",
"is_bot": false,
"headline": "Get rid of curl_easy_reset (#192)",
"author_name": "Vladimir Kochnev",
"author_login": "marshall-lee",
"committed_at": "2022-08-23T12:08:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9531c06fc049ca70e685f563e0320037297e2e8b",
"body": "Lower the /slow endpoint respond time",
"is_bot": false,
"headline": "Merge pull request #191 from marshall-lee/fix/slow-timeout",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2022-08-03T16:11:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a76dcd5cc7fd2c7aa05b5162475f3cd0f0bc6f7",
"body": "sleep 20 is unnecessary big, tests are too slow because of that",
"is_bot": false,
"headline": "Lower the /slow endpoint respond time",
"author_name": "Vladimir Kochnev",
"author_login": "marshall-lee",
"committed_at": "2022-08-03T00:21:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5b72824dc3b2350f5a3e79694e7156a133aa354",
"body": "Better monitoring of forked Puma processes",
"is_bot": false,
"headline": "Merge pull request #188 from marshall-lee/enhancement/fork-monitoring",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2022-08-02T18:54:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21501b44ca7226f2b82a55911311776bfffeeff1",
"body": "Fix session_escape/session_unescape",
"is_bot": false,
"headline": "Merge pull request #189 from marshall-lee/fix/session-escape-unescape",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2022-08-02T18:52:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "853ff8568770c6e98d4d6b90f5bb1c8f61373dcc",
"body": "…te_method\n\nUse rb_define_private_method for Session methods",
"is_bot": false,
"headline": "Merge pull request #190 from marshall-lee/enhancement/rb_define_priva…",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2022-08-02T18:51:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ae6377b1aa3021103f1d961988065523b11011e",
"body": null,
"is_bot": false,
"headline": "Use rb_define_private_method for Session methods",
"author_name": "Vladimir Kochnev",
"author_login": "marshall-lee",
"committed_at": "2022-08-02T17:34:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65fc73a4a666b401975b2f42543916a47e63f583",
"body": "* Pointer type was incorrect\n* Since version 7.82 the curl parameter is ignored, so it's not needed\n to allocate the handle. See https://curl.se/libcurl/c/curl_easy_escape.html",
"is_bot": false,
"headline": "Fix session_escape/session_unescape",
"author_name": "Vladimir Kochnev",
"author_login": "marshall-lee",
"committed_at": "2022-08-02T14:06:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11941fe579b325e68b9fba3e6897e5a1a0541ec4",
"body": "3d3d5b3 introduced running Puma processes as child forks.\n\nThe fix was necessary but it doesn't monitor the process state properly.\n\nWhat if `after(:suite)` block is not executed at all and child process\nbecomes a zombie?\nWhat if fork process refuses to exit for some reason?\n\nSo I have introduced a `Fork` helper that tries to prevent forks from\nbecoming a zombie by sending it `SIGKILL` if `SIGTERM` didn't have an\neffect in 500ms or when Ruby interpreter terminates completely (`at_exit`).",
"is_bot": false,
"headline": "Better monitoring of forked Puma processes",
"author_name": "Vladimir Kochnev",
"author_login": "marshall-lee",
"committed_at": "2022-08-02T13:33:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f1dd5113f558b07e1990dad9311e8af5f032683",
"body": "Close tempfile before passing it to libcurl",
"is_bot": false,
"headline": "Merge pull request #187 from marshall-lee/fix/spec-tempfile",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2022-08-01T15:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2176414d0031c7f0c51a63a5f78779c0b79750b3",
"body": "Closes #184",
"is_bot": false,
"headline": "Close tempfile before passing it to libcurl",
"author_name": "Vladimir Kochnev",
"author_login": "marshall-lee",
"committed_at": "2022-08-01T10:34:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bc663191b985e7bbc4534d16703c9644abf9969",
"body": "Migrate CI to GitHub Actions now that Travis CI.org is inactive.\r\n\r\nIn addition to adding a basic `ci.yml` file, I needed to make several other changes:\r\n\r\n1. Loosen the development dependency on `rake` to allow more recent versions\r\n2. Wrap the use of `YAML::load` in the specs in a helper function \n[…]\nrace condition between the `PatronTestServer` and the actual specs. In the interest of getting something working quickly I temporarily removed `ruby-head`. All other Rubies in the CI file are green.",
"is_bot": false,
"headline": "Migrate CI to GitHub actions (#186)",
"author_name": "Peter Goldstein",
"author_login": "petergoldstein",
"committed_at": "2022-03-30T01:12:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1067878599e5ef76276a14d800cb6f9dd8cc4e9e",
"body": "We needed to ensure libcurl follows through with forwarding the Range header on\r\na redirect, and it seems useful to have verified in the specs here as well.",
"is_bot": false,
"headline": "Add a test for a 307 redirect with a Range header (#181)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2020-12-01T13:09:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ec6c1e5bd3371700475ea40dabd352a9f1522f3",
"body": null,
"is_bot": false,
"headline": "Bump Rack dependency version",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2020-07-21T16:24:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5da8f7aedd75f7d98d82314588cc44c91d7242fb",
"body": "README: Use syntax highlighting code fences",
"is_bot": false,
"headline": "Merge pull request #178 from olleolleolle/patch-1",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2020-04-03T18:03:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22d1301fea599bef7c7f15a573f014a2c9ac1384",
"body": null,
"is_bot": false,
"headline": "README: Use syntax highlighting code fences",
"author_name": "Olle Jonsson",
"author_login": "olleolleolle",
"committed_at": "2020-04-03T17:16:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5de9d2aa93351f965579e59316ca04f5430c1abd",
"body": "gemspec: Avoid a \"*spec\" typo",
"is_bot": false,
"headline": "Merge pull request #175 from olleolleolle/patch-1",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2020-04-03T16:59:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20f03911dab92f3bcf3158deefecf4092b333064",
"body": "CI: Drop unused Travis sudo: false directive",
"is_bot": false,
"headline": "Merge pull request #176 from olleolleolle/patch-2",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2020-04-03T16:58:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92f20fac4810b9900b1a8d990804967dcc3ac621",
"body": "Avoid Ruby warning `*' interpreted as argument prefix",
"is_bot": false,
"headline": "Merge pull request #177 from olleolleolle/patch-3",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2020-04-03T16:57:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b84ba489fb28f474195d215be7cc6bed43c32bc",
"body": null,
"is_bot": false,
"headline": "Avoid warning `*' interpreted as argument prefix",
"author_name": "Olle Jonsson",
"author_login": "olleolleolle",
"committed_at": "2020-04-02T19:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "702018bcc3db724e74fe85dea1244897a20d7fa0",
"body": null,
"is_bot": false,
"headline": "CI: Drop unused Travis sudo: false directive",
"author_name": "Olle Jonsson",
"author_login": "olleolleolle",
"committed_at": "2020-04-02T18:58:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ed06bda496c23943919534cfedd2edd7697eecc",
"body": "Perhaps introduced in 02dc7abd8e30b0707f34bc29f91ee3623e4481c1",
"is_bot": false,
"headline": "gemspec: Avoid a \"*spec\" typo",
"author_name": "Olle Jonsson",
"author_login": "olleolleolle",
"committed_at": "2020-04-02T18:58:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8599153bd69dfbbe6da8fac9088893181cca1500",
"body": null,
"is_bot": false,
"headline": "Update gemspec",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2020-03-03T16:42:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83957e112f138376a2789ed190b02be742b4b660",
"body": "Add licensing information to gemspec.",
"is_bot": false,
"headline": "Merge pull request #174 from Steap/patch-1",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2019-12-16T19:32:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28d4a052454c7e9fbeea8da4ac922456c0b2a674",
"body": "This should make it easier for automated tools to find out what license is used.",
"is_bot": false,
"headline": "Add licensing information to gemspec.",
"author_name": "Cyril Roelandt",
"author_login": "Steap",
"committed_at": "2019-12-16T19:11:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4897d1e171939fb76b39efb7fc432980ff7bc194",
"body": null,
"is_bot": false,
"headline": "Update yard to mitigate a security vulnerability",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2019-07-10T16:42:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d3d5b3dd14751b9f2d1e89269a51d77b62c89ac",
"body": "Puma migration in f905d35 didn't go well. Some specs are failing due to\r\nthe following problems:\r\n\r\n- `GzipServlet` does not see `Zlib`.\r\n- `GzipServlet` should respond with `Content-Length` (WEBRick did it automatically).\r\n- `BodyReadback` should use `CONTENT_TYPE` instead of `HTTP_CONTENT_TYPE`.\r\n\n[…]\nen\r\ndo the cleanup. Second Ctrl+C press force-terminates the process.\r\n\r\nThis logic is overriden by Puma since `trap('INT')` is global to the\r\nprocess. The solution is to run Puma in separate process.",
"is_bot": false,
"headline": "Run Puma test servers in separate processes instead of threads (#172)",
"author_name": "Vladimir Kochnev",
"author_login": "marshall-lee",
"committed_at": "2019-05-20T16:21:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c48e31cfb93d8359c8c81a9d3fb14269f24b6aac",
"body": null,
"is_bot": false,
"headline": "Bump version to alpha",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2019-03-11T20:14:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ce8973ba77b9c370ae1ff4cc7eb03d89562a4ca",
"body": null,
"is_bot": false,
"headline": "Explain the curl state list",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2019-03-11T20:14:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39b2a3c06b5dde265e392599c8d4cf494f477a5a",
"body": "On 2.3+ upwards we don't need to check for\nheader presence as those headers are always\navailable. We can also unify and simplify\nGVL lock/unlock to one set of functions.",
"is_bot": false,
"headline": "Remove thread_blocking_region and thread.h checks",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2019-03-11T20:14:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12cc3821c0f585f3a0d899001b2df9267fb84084",
"body": null,
"is_bot": false,
"headline": "Document Ruby version support",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2019-03-11T20:14:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9328e359160b9a834522ad61fa0debb2835e32eb",
"body": "Update Travis Rubies",
"is_bot": false,
"headline": "Merge pull request #170 from CHTJonas/master",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2019-02-25T17:41:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a285c22a01df270cebb81e3f398e0e5629513b68",
"body": null,
"is_bot": false,
"headline": "Run tests against all supported Ruby versions, plus head",
"author_name": "Charlie Jonas",
"author_login": "CHTJonas",
"committed_at": "2019-02-23T20:21:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec27fdcfae9f4acb5380f6c6bb953a422ab2358e",
"body": null,
"is_bot": false,
"headline": "Shorten to one version",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2019-02-22T12:53:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc5193325be0d7919f266ab47b445f9bf2031f9b",
"body": null,
"is_bot": false,
"headline": "Bump version and changelog",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2019-02-22T12:53:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a84e6b6a639404b28185fdbd86241ec00983636",
"body": "Document and clean up connection reuse",
"is_bot": false,
"headline": "Merge pull request #169 from toland/persistent-curl-handle",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2019-02-18T17:53:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a0f520eb9650af97a25457ea352fd639fcb68c8",
"body": null,
"is_bot": false,
"headline": "Update CI config for the modern Bundler situation",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2019-02-17T01:20:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d297b12fb89afeea5398f1600c15db7c2935d80b",
"body": "During a recent investigation we had questions whether\nPatron is actually keepalive-friendly. It turned out that\nit totally is, but there are a few bits which can be\nmade less tricky than they were. So:\n\n* Document connection reuse as it is implemented in Patron\n* Init the libCURL handle when Sessio\n[…]\n have now removed. In general the\nsession_reset did not serve a special purpose and\nwas just a variation of session_interrupt.\n\nErasing and freeing the libCURL datastructures should\nbe left to the GC.",
"is_bot": false,
"headline": "Eagerly init libCURL and doc connection reuse",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2019-02-17T01:19:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f21a2e5585046526c4284b6d51604292c3f3f3c1",
"body": "Update Homebrew install procedure",
"is_bot": false,
"headline": "Merge pull request #168 from CHTJonas/patch-1",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2019-02-04T17:16:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "123ce61848b55e029627d99eb114b7fbf182d290",
"body": "Homebrew have removed options from the install process, so curl linked to OpenSSL is now a separate formula.",
"is_bot": false,
"headline": "Update Homebrew install procedure",
"author_name": "Charlie Jonas",
"author_login": "CHTJonas",
"committed_at": "2019-01-30T19:16:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c94cb8f324ee9640d7b7a0f119548e5aae11f14e",
"body": null,
"is_bot": false,
"headline": "Bump version",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-04-10T17:23:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83d9f526d4b9dd3c769628e383eb9b30b04d6492",
"body": "When dealing with fast services it is reasonable to be willing to\nlimit the timeout to a smaller value than 1 second. We run services\nthat are fine with 40ms-200ms response times, and if they go over\nthat they cause upstream latencies to shoot up. We can switch\nto using the _MS timeout settings of l\n[…]\nbility to\ntighten up the timeouts.\n\nAlso removes the artificial restriction on the timeout not being 0\nsince in libCURL a timeout of 0 means \"no timeout\" and that could\nalso be a legitimate user need.",
"is_bot": false,
"headline": "Allow timeouts to be set to sub-second values",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-04-10T17:22:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4c1a2550b312901c6fa4caa2bca003065063434a",
"body": "Update the yard spec to avoid a known vulnerability",
"is_bot": false,
"headline": "Merge pull request #162 from toland/fix-yard-vulnerability",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2018-02-23T16:33:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d68e85611f40d1c936e88db41be5ad250563248",
"body": "The issue we are avoiding is described here: https://nvd.nist.gov/vuln/detail/CVE-2017-17042",
"is_bot": false,
"headline": "Update the yard spec to avoid a known vulnerability",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2018-02-23T16:26:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1846d96483d86b0f7abbf6ef4563ac35716ebac2",
"body": null,
"is_bot": false,
"headline": "Bump to 0.12.1",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-02-20T17:11:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca5713cef132f5001c0b0682a809e2709e9cf835",
"body": null,
"is_bot": false,
"headline": "Fix parsing of HTTP2 status and headers (#161)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-02-20T17:10:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25777074c6efab21d5b23a4995b8ea67174d48ab",
"body": null,
"is_bot": false,
"headline": "Bump minor version",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-02-05T22:54:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b146c3f3f8b615805c831e0a0a661d429f927674",
"body": "Webmock overrides a ton of the Patron session internals, and it furnishes a modified\r\nstring of headers to the internal parse_headers method. That string, unlike real libCURL\r\nheader strings, does not have the terminating CRLF at the end of the last header. Nor does\r\nit have an empty line at the ver\n[…]\napproach without scans.\r\n\r\nThat said, the expectation that Webmock will keep working with the refactors we appply -\r\ngiven how much private stuff they rely on - might be a little naive.\r\n\r\nCloses #157",
"is_bot": false,
"headline": "Fix a Webmock regression (#159)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-02-05T22:48:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5c625635754c33447cb4e457b254813ccb2c8140",
"body": "to be configured via Session#dsn_cache_timeout=",
"is_bot": false,
"headline": "Make DNS cache timeout configurable (#160)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-02-05T22:47:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f905d35d68e08149e37bc24b298f66a43252adcf",
"body": "We want to test streaming responses more reliably and doing that with Webrick is a pain.\r\nTo deal with that we need to modernise our test server.",
"is_bot": false,
"headline": "Replace WEBrick test server with Puma+Rack (#156)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-01-31T21:18:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33e186e90785ca4051e8ebdc9f8445125b21bcee",
"body": null,
"is_bot": false,
"headline": "Add 2.5.0 to Travis config (#155)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-01-30T22:44:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5be4c31c7504816096bb136260312edb5a4833f6",
"body": "In most situations some library would require it,\nbut even Patron's own \"rake shell\" didn't.",
"is_bot": false,
"headline": "Bugfix: make sure StringScanner is available",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-01-30T22:40:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27a3dcaad1ad271761eaeeb97965f0308626c5e1",
"body": null,
"is_bot": false,
"headline": "Bump version and prepare for release",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-01-30T21:21:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba2161cd0004e2cded4b2015821f8f38b833636c",
"body": "We should provide some ability for users to re-acquire the GIL and call Ruby callback blocks. We will start with a progress callback which can be used for progress bars and speed computation. We also need to alter the way we unblock the thread so that we correctly handle signals.\r\n\r\nThis adds the fo\n[…]\n.or other interesting actions\r\n}\r\nThe GIL will only be reacquired if this is configured on the Session/Request objects, otherwise we proceed through the same fast path as before with the GIL unlocked.",
"is_bot": false,
"headline": "Add Ruby progress callback + customise our GIL unblock function (#151)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-01-30T21:19:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f747d8f9855e7a041b493ed483056f8344deb988",
"body": "libCURL passes a string of multiple HTTP responses strung together to\r\nthe caller. The caller then has to parse out the separate responses from\r\nthat string to get the correct status code etc.",
"is_bot": false,
"headline": "Correctly parse headers from multiple responses (#154)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2018-01-30T21:14:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff119cf573b2b17fcba2d17c6be4b795bff316c2",
"body": null,
"is_bot": false,
"headline": "Update the changelog",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-10-04T21:20:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45cd1941d65f682b9a86d7b785c339873b6a7c9a",
"body": "Add support for LOW_SPEED_TIME and LOW_SPEED_LIMIT",
"is_bot": false,
"headline": "Merge pull request #149 from toland/low-speed-support",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2017-10-04T20:20:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a72b97704bce5b6f8b31d52748e21f97da3f7578",
"body": "These permit libCURL to time out early if the socket is starved.\nThis is useful for setting timeouts based on the expected response\nsize, as opposed to configuring one hard read timeout for the\nentire response receive time stretch. For instance, with a read\ntimeout, you would need to set a value that works equally well\nfor a 5MB download as well as for a 50MB download.\n\nThese two CURLOPTs permit timeouts based on speed as well",
"is_bot": false,
"headline": "Add support for LOW_SPEED_TIME and LOW_SPEED_LIMIT",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-10-03T22:39:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e596975eafa800805d4eaf839392f4b0eebc821",
"body": null,
"is_bot": false,
"headline": "Ignore Gemfile.lock",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-10-03T22:38:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23326e1327348abf0f0251ffb110a4370b9af170",
"body": null,
"is_bot": false,
"headline": "Gemfile.lock is not needed in a library",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-10-03T22:38:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "441bcd549bd06a53a7e2a041800785eced4957a5",
"body": "to avoid a Rubygems regression which is making builds fail\non older Rubies\n\nhttps://github.com/rubygems/rubygems/issues/2024",
"is_bot": false,
"headline": "Fix Travis config and pin rubygems version",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-10-03T18:40:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d80f0fa2d9a6f5fab636f23dfe4a1f31f23f9679",
"body": "Copyright statements remain in LICENSE and in README",
"is_bot": false,
"headline": "Remove the copyright stanza from all files (#148)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-09-11T18:03:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "045469118edbf9ac7a7945a3f7cfc34e6fbe1389",
"body": null,
"is_bot": false,
"headline": "Bump version once more",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-07-18T23:34:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd86cd42678e1d5d78f45cc9e1a7698a38b24f5e",
"body": null,
"is_bot": false,
"headline": "Clean up release tasks",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-07-18T23:33:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3adfc5d6bddc371de08e55c80aef7e3f04a3654",
"body": null,
"is_bot": false,
"headline": "Update self-ref in Gemfile.lock",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-07-18T23:27:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ba5afbc53aec33b36fa3fa266793d3cb1efa9af",
"body": null,
"is_bot": false,
"headline": "Mark the new version",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-07-18T23:24:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9659130538e6ef8beab2ff65d1bb120bf75ddaa3",
"body": null,
"is_bot": false,
"headline": "Update CHANGELOG and mark 0.9.0",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-07-18T23:24:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14140f4f596b7d763a893d9b831f8a266349fcbd",
"body": "Add libcurl_version_exact for fetching version",
"is_bot": false,
"headline": "Merge pull request #144 from toland/libcurl-version",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2017-06-14T14:22:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc0bd6bac170cc34c7e69ab31933b41df65cfd31",
"body": "Allow limiting the download size via CURL progress callback",
"is_bot": false,
"headline": "Merge pull request #140 from toland/limit-download-via-progress-func",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2017-06-14T14:21:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85485c68dbe4d1a8a518d2b38dd65d9a07211e84",
"body": "libCURL provided on their Precise infra is too old to\nsupport the progress function (or rather, it has a bug\npreventing it from working).",
"is_bot": false,
"headline": "Switch Travis to Trusty beta",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-10T00:53:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f168aab84c109066959110b6380311ab3d049464",
"body": "It can be useful when working with downloads\nfrom untrusted sources in combination with\ncalls like `get_file`. If we can limit the\namount of data received we can prevent servers\nsuddenly sending us tons and tons of data whereas\nin fact we only expect a few KB. By default\nthe option is disabled.\n\nIf \n[…]\nto be called.\n\nUpdate interrupt handling, add Patron::Aborted\nfor when the callback tells CURL to stop.\n\nDefine the data write correctly for file downloads\nfor Windows compatibility (as per CURL doc).",
"is_bot": false,
"headline": "Allow setting download_byte_limit",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-10T00:53:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "562b8ec9d7a9d614dfb19d18f3942b3b7277cda8",
"body": "so that it becomes apparent that\n\n* it is our own type\n* it also contains data Patron uses",
"is_bot": false,
"headline": "Rename curl_state to patron_curl_state",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-10T00:50:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5df92f375a7e7bb0ed9beee155bae80cca2bb4e8",
"body": "which is swallowed by the preprocessor if the CURL\nversion is old enough, but _does_ trigger on latest\nOSX Sierra since the block does get invoced - and\nclang rightfully refuses",
"is_bot": false,
"headline": "Fix the invalid if statement opener",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-09T23:43:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dc7b7458bef6190b84e6180c5ac36ec8c3efbef",
"body": null,
"is_bot": false,
"headline": "Update the changelog",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-09T22:55:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e79e16f9a4d16e402cc4022ee846be65752e2f5",
"body": "New libCURL options for HTTP Version and SSL Version",
"is_bot": false,
"headline": "Merge pull request #141 from saeohioalpha/master",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-09T20:20:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "704d84e9ad36583f35e3267eaf5e17a8fd107eb2",
"body": "as it might prove useful when debugging the library in-situ",
"is_bot": false,
"headline": "Leave test data in place when packaging the gem",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-07T12:49:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c4367729077a8b65dccae0e96f30f733c03ea34",
"body": "Updated tests to use known good versions of the TLS and HTTP tests.",
"is_bot": false,
"headline": "Fixed indentation to be consistent with .c file",
"author_name": "Joseph Costello",
"author_login": "saeohioalpha",
"committed_at": "2017-06-05T19:22:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b86a77a92489b2ef12461239b7e9c59d3c37c38d",
"body": "Update the gem release procedure and gemspec",
"is_bot": false,
"headline": "Merge pull request #142 from toland/newgem",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-05T18:35:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02dc7abd8e30b0707f34bc29f91ee3623e4481c1",
"body": "Use the latest Bundler/Rubygems features to automate releases",
"is_bot": false,
"headline": "Update the gem release procedure and gemspec",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-05T18:30:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0b5f885cd22337c089ea3e24fbc12dccf5d7a04",
"body": "Make Patron Ruby 2.4.1 ready",
"is_bot": false,
"headline": "Merge pull request #143 from toland/ruby-241",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-05T18:26:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efc730f7b6da8c4b6568735c7c1421147797a132",
"body": "It worked apparently, but this codifies the fact. Adds 2.4.1 to Travis,\nchanges Fixnum assertions/documentation to Integers, and updates Simplecov\nto a version with a compatible JSON extension",
"is_bot": false,
"headline": "Make Patron Ruby 2.4.1 ready",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-04T14:26:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1db58fe16ac78da0cf9bab981a18976bf6fe1acb",
"body": "More and more options in Patron depend on the specific CURL features\nbeing available, and that is version dependent. The current libcurl_version\nmethod does not provide something that's easily machine-usable or comparable,\nand since these values are available in the included headers we might as well\n[…]\n them.\n\nAnother option would be to use `Gem::Version` but I am not certain libCURL\nversion semantics are the same as gem version semantics, and then you need\nyour own comparison operator and so forth.",
"is_bot": false,
"headline": "Add libcurl_version_exact for fetching version",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2017-06-04T14:18:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "927bc1ebc286a38ebb88bceb1a62687e2c4316fc",
"body": null,
"is_bot": false,
"headline": "added declaration for UnsupportedHTTPVersion error exception",
"author_name": "Joseph Costello",
"author_login": "saeohioalpha",
"committed_at": "2017-05-25T13:32:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f87c7029250b609fa3bdb930fd056a930968ff8",
"body": "…statements for libCURL version",
"is_bot": false,
"headline": "updated http_version section of session_ext.c to handle preprocessor …",
"author_name": "Joseph Costello",
"author_login": "saeohioalpha",
"committed_at": "2017-05-25T13:27:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5106f301e4290dc63bfb1f7074b1afdb0f402c6a",
"body": "…tatements for libCURL version",
"is_bot": false,
"headline": "updated ssl_version section of session_ext.c to handle preprocessor s…",
"author_name": "Joseph Costello",
"author_login": "saeohioalpha",
"committed_at": "2017-05-25T13:22:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c12b07971516b161c90e80c7c824047d6f99e9d",
"body": "…additions",
"is_bot": false,
"headline": "Updated CHANGELOG to reflect the ssl_version and http_version update/…",
"author_name": "Joseph Costello",
"author_login": "saeohioalpha",
"committed_at": "2017-05-25T12:50:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8ba0ec58ef27e35f88b409dc1f1fb94645ced8b",
"body": "…e libcurl documentation\n\nAdded http_version selection with options None, HTTPv1_0, HTTPv1_1 HTTPv2_0 per the libcurl documentation",
"is_bot": false,
"headline": "Added TLSv1_1, TLSv1_2, and TLSv1_3 options to the ssl_version per th…",
"author_name": "Joseph Costello",
"author_login": "saeohioalpha",
"committed_at": "2017-05-25T12:41:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "158fcc1462fc94ff29b534249eb4209d16c03e64",
"body": null,
"is_bot": false,
"headline": "Release version 0.8.0",
"author_name": "Phil Toland",
"author_login": null,
"committed_at": "2016-09-05T19:43:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc548171a962b32b771e3f9fb3ecb51e949e7253",
"body": null,
"is_bot": false,
"headline": "Up the version number to 0.8 (we are introducing features)",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2016-08-19T15:47:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b4b71f22316e05404df2a5227014baa73e7f078",
"body": null,
"is_bot": false,
"headline": "Add changelog notes on response body decoding",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2016-08-19T15:47:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "109d762f288c68b2bc5a3b38f310a8b98c9ba812",
"body": "Resolve charset issues for HTTP response body decoding. Explicitly separate the decodable (text) bodies and raw bodies, and allow the user to pick one or the other. Note that this might have subtle side-effects, all feedback welcome.",
"is_bot": false,
"headline": "Merge pull request #135 from AlexRiedler/charset-tweaks",
"author_name": "Julik Tarkhanov",
"author_login": "julik",
"committed_at": "2016-08-19T15:43:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fc2ccf4481393400d984c54e4c17fd6a13309d1",
"body": null,
"is_bot": false,
"headline": "Fix private members after rebase.",
"author_name": "Alex Riedler",
"author_login": null,
"committed_at": "2016-08-11T22:03:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abb2c7f719ad4bdcc31fc79bc7a13c63ed7e5eb3",
"body": null,
"is_bot": false,
"headline": "Fix specs, and encoding issue for headers.",
"author_name": "Alex Riedler",
"author_login": null,
"committed_at": "2016-08-11T22:01:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bc4a0221dbbb94305ac8def272cce2c2ec337c9",
"body": null,
"is_bot": false,
"headline": "Fix missing requires.",
"author_name": "Alex Riedler",
"author_login": null,
"committed_at": "2016-08-11T22:01:05Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 2,
"commits_last_year": 3,
"latest_release_at": "2014-07-24T22:28:56Z",
"latest_release_tag": "v0.4.20",
"releases_from_tags": false,
"days_since_last_push": 29,
"active_weeks_last_year": 2,
"days_since_latest_release": 4380,
"mean_days_between_releases": 1.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "patron",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "rubygems",
"matches_repo": true,
"registry_url": "https://rubygems.org/gems/patron",
"is_deprecated": false,
"latest_version": "0.13.4",
"repository_url": "https://github.com/toland/patron",
"versions_count": 40,
"total_downloads": 5865291,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2009-08-05T13:16:15Z",
"latest_published_at": "2025-02-27T21:59:50.245000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 509
}
]
},
"popularity": {
"forks": 74,
"stars": 547,
"watchers": 14,
"fork_history": {
"days": [
{
"date": "2009-11-24",
"count": 1
},
{
"date": "2009-12-07",
"count": 1
},
{
"date": "2010-01-31",
"count": 1
},
{
"date": "2010-06-17",
"count": 1
},
{
"date": "2010-09-14",
"count": 1
},
{
"date": "2010-09-16",
"count": 1
},
{
"date": "2010-09-23",
"count": 1
},
{
"date": "2010-10-07",
"count": 1
},
{
"date": "2010-10-28",
"count": 1
},
{
"date": "2010-11-02",
"count": 1
},
{
"date": "2010-11-08",
"count": 1
},
{
"date": "2010-12-20",
"count": 1
},
{
"date": "2011-01-11",
"count": 1
},
{
"date": "2011-01-15",
"count": 1
},
{
"date": "2011-03-10",
"count": 1
},
{
"date": "2011-03-13",
"count": 1
},
{
"date": "2011-04-13",
"count": 1
},
{
"date": "2011-07-13",
"count": 1
},
{
"date": "2011-08-04",
"count": 1
},
{
"date": "2011-08-24",
"count": 1
},
{
"date": "2011-08-30",
"count": 1
},
{
"date": "2012-03-07",
"count": 1
},
{
"date": "2012-03-12",
"count": 1
},
{
"date": "2012-03-26",
"count": 1
},
{
"date": "2012-05-06",
"count": 1
},
{
"date": "2012-06-22",
"count": 1
},
{
"date": "2012-07-27",
"count": 1
},
{
"date": "2012-10-09",
"count": 1
},
{
"date": "2012-11-01",
"count": 1
},
{
"date": "2012-11-17",
"count": 1
},
{
"date": "2013-03-08",
"count": 1
},
{
"date": "2013-04-04",
"count": 1
},
{
"date": "2013-04-30",
"count": 1
},
{
"date": "2013-06-30",
"count": 1
},
{
"date": "2013-09-18",
"count": 1
},
{
"date": "2013-10-07",
"count": 1
},
{
"date": "2013-11-23",
"count": 1
},
{
"date": "2013-11-26",
"count": 1
},
{
"date": "2014-04-19",
"count": 1
},
{
"date": "2014-06-13",
"count": 1
},
{
"date": "2014-06-16",
"count": 1
},
{
"date": "2014-08-06",
"count": 1
},
{
"date": "2014-08-21",
"count": 1
},
{
"date": "2014-11-06",
"count": 1
},
{
"date": "2014-11-23",
"count": 1
},
{
"date": "2015-03-11",
"count": 1
},
{
"date": "2015-04-30",
"count": 1
},
{
"date": "2015-05-15",
"count": 1
},
{
"date": "2015-07-01",
"count": 1
},
{
"date": "2015-10-07",
"count": 1
},
{
"date": "2016-03-08",
"count": 1
},
{
"date": "2016-05-02",
"count": 1
},
{
"date": "2016-08-10",
"count": 1
},
{
"date": "2016-08-11",
"count": 1
},
{
"date": "2016-10-11",
"count": 1
},
{
"date": "2017-03-04",
"count": 1
},
{
"date": "2017-05-25",
"count": 1
},
{
"date": "2017-07-04",
"count": 1
},
{
"date": "2017-08-11",
"count": 1
},
{
"date": "2017-08-15",
"count": 1
},
{
"date": "2018-01-23",
"count": 1
},
{
"date": "2018-03-18",
"count": 1
},
{
"date": "2018-04-18",
"count": 1
},
{
"date": "2018-06-28",
"count": 1
},
{
"date": "2019-12-16",
"count": 1
},
{
"date": "2020-04-02",
"count": 1
},
{
"date": "2021-09-22",
"count": 1
},
{
"date": "2022-07-07",
"count": 1
},
{
"date": "2022-08-28",
"count": 1
},
{
"date": "2023-03-10",
"count": 1
},
{
"date": "2026-06-03",
"count": 1
}
],
"complete": true,
"collected": 71,
"total_forks": 74
},
"star_history": {
"days": [
{
"date": "2009-06-23",
"count": 284
},
{
"date": "2009-06-25",
"count": 1
},
{
"date": "2009-06-26",
"count": 1
},
{
"date": "2009-07-04",
"count": 1
},
{
"date": "2009-07-09",
"count": 1
},
{
"date": "2009-07-20",
"count": 1
},
{
"date": "2009-07-22",
"count": 1
},
{
"date": "2009-08-22",
"count": 1
},
{
"date": "2009-08-24",
"count": 1
},
{
"date": "2009-08-25",
"count": 1
},
{
"date": "2009-09-02",
"count": 1
},
{
"date": "2009-10-04",
"count": 2
},
{
"date": "2009-10-12",
"count": 1
},
{
"date": "2009-10-25",
"count": 1
},
{
"date": "2009-10-26",
"count": 1
},
{
"date": "2009-10-29",
"count": 1
},
{
"date": "2009-11-15",
"count": 1
},
{
"date": "2009-11-17",
"count": 1
},
{
"date": "2009-12-10",
"count": 1
},
{
"date": "2009-12-25",
"count": 1
},
{
"date": "2010-01-06",
"count": 1
},
{
"date": "2010-02-10",
"count": 1
},
{
"date": "2010-02-12",
"count": 1
},
{
"date": "2010-02-19",
"count": 1
},
{
"date": "2010-03-07",
"count": 1
},
{
"date": "2010-04-14",
"count": 1
},
{
"date": "2010-04-27",
"count": 1
},
{
"date": "2010-05-19",
"count": 1
},
{
"date": "2010-05-30",
"count": 1
},
{
"date": "2010-06-18",
"count": 1
},
{
"date": "2010-06-23",
"count": 1
},
{
"date": "2010-06-28",
"count": 1
},
{
"date": "2010-07-04",
"count": 1
},
{
"date": "2010-07-09",
"count": 1
},
{
"date": "2010-08-06",
"count": 1
},
{
"date": "2010-08-20",
"count": 1
},
{
"date": "2010-09-18",
"count": 1
},
{
"date": "2010-10-07",
"count": 1
},
{
"date": "2010-10-20",
"count": 1
},
{
"date": "2010-11-10",
"count": 1
},
{
"date": "2010-11-14",
"count": 1
},
{
"date": "2010-11-15",
"count": 1
},
{
"date": "2010-11-23",
"count": 1
},
{
"date": "2011-02-03",
"count": 1
},
{
"date": "2011-02-11",
"count": 1
},
{
"date": "2011-02-15",
"count": 1
},
{
"date": "2011-02-28",
"count": 1
},
{
"date": "2011-03-12",
"count": 1
},
{
"date": "2011-03-15",
"count": 1
},
{
"date": "2011-06-05",
"count": 1
},
{
"date": "2011-06-18",
"count": 1
},
{
"date": "2011-09-01",
"count": 1
},
{
"date": "2011-09-07",
"count": 1
},
{
"date": "2011-09-10",
"count": 1
},
{
"date": "2011-09-18",
"count": 1
},
{
"date": "2011-10-03",
"count": 1
},
{
"date": "2011-12-01",
"count": 1
},
{
"date": "2011-12-13",
"count": 1
},
{
"date": "2012-02-16",
"count": 2
},
{
"date": "2012-03-25",
"count": 1
},
{
"date": "2012-06-26",
"count": 1
},
{
"date": "2013-03-04",
"count": 1
},
{
"date": "2013-03-06",
"count": 1
},
{
"date": "2013-03-19",
"count": 2
},
{
"date": "2013-03-20",
"count": 1
},
{
"date": "2013-03-27",
"count": 1
},
{
"date": "2013-03-31",
"count": 1
},
{
"date": "2013-05-12",
"count": 1
},
{
"date": "2013-05-16",
"count": 1
},
{
"date": "2013-06-27",
"count": 1
},
{
"date": "2013-07-16",
"count": 1
},
{
"date": "2013-08-25",
"count": 1
},
{
"date": "2013-09-16",
"count": 1
},
{
"date": "2013-10-03",
"count": 2
},
{
"date": "2013-10-25",
"count": 1
},
{
"date": "2013-10-26",
"count": 1
},
{
"date": "2013-10-28",
"count": 1
},
{
"date": "2013-11-20",
"count": 1
},
{
"date": "2013-11-27",
"count": 1
},
{
"date": "2014-02-16",
"count": 1
},
{
"date": "2014-02-17",
"count": 1
},
{
"date": "2014-02-27",
"count": 1
},
{
"date": "2014-03-04",
"count": 1
},
{
"date": "2014-03-06",
"count": 1
},
{
"date": "2014-03-11",
"count": 1
},
{
"date": "2014-03-22",
"count": 1
},
{
"date": "2014-03-27",
"count": 1
},
{
"date": "2014-05-11",
"count": 1
},
{
"date": "2014-05-14",
"count": 1
},
{
"date": "2014-05-19",
"count": 1
},
{
"date": "2014-05-20",
"count": 1
},
{
"date": "2014-05-22",
"count": 1
},
{
"date": "2014-05-29",
"count": 1
},
{
"date": "2014-06-24",
"count": 1
},
{
"date": "2014-07-15",
"count": 1
},
{
"date": "2014-07-18",
"count": 2
},
{
"date": "2014-07-21",
"count": 1
},
{
"date": "2014-08-08",
"count": 1
},
{
"date": "2014-08-18",
"count": 1
},
{
"date": "2014-08-22",
"count": 1
},
{
"date": "2014-08-25",
"count": 1
},
{
"date": "2014-08-29",
"count": 1
},
{
"date": "2014-09-09",
"count": 1
},
{
"date": "2014-10-07",
"count": 1
},
{
"date": "2014-10-16",
"count": 1
},
{
"date": "2014-10-18",
"count": 1
},
{
"date": "2014-10-20",
"count": 1
},
{
"date": "2014-10-21",
"count": 1
},
{
"date": "2014-11-04",
"count": 1
},
{
"date": "2014-11-29",
"count": 1
},
{
"date": "2014-12-11",
"count": 1
},
{
"date": "2014-12-18",
"count": 1
},
{
"date": "2015-01-06",
"count": 1
},
{
"date": "2015-01-07",
"count": 1
},
{
"date": "2015-01-26",
"count": 1
},
{
"date": "2015-02-06",
"count": 2
},
{
"date": "2015-03-03",
"count": 1
},
{
"date": "2015-03-14",
"count": 2
},
{
"date": "2015-03-16",
"count": 1
},
{
"date": "2015-03-20",
"count": 1
},
{
"date": "2015-03-24",
"count": 1
},
{
"date": "2015-03-27",
"count": 1
},
{
"date": "2015-03-30",
"count": 1
},
{
"date": "2015-05-13",
"count": 1
},
{
"date": "2015-07-23",
"count": 1
},
{
"date": "2015-08-15",
"count": 1
},
{
"date": "2015-08-27",
"count": 1
},
{
"date": "2015-09-06",
"count": 1
},
{
"date": "2015-09-08",
"count": 1
},
{
"date": "2015-09-11",
"count": 1
},
{
"date": "2015-09-21",
"count": 1
},
{
"date": "2015-10-14",
"count": 1
},
{
"date": "2015-10-17",
"count": 1
},
{
"date": "2015-10-18",
"count": 1
},
{
"date": "2015-10-19",
"count": 1
},
{
"date": "2015-10-28",
"count": 1
},
{
"date": "2015-11-05",
"count": 1
},
{
"date": "2015-11-11",
"count": 1
},
{
"date": "2015-11-12",
"count": 1
},
{
"date": "2015-11-16",
"count": 2
},
{
"date": "2015-12-21",
"count": 2
},
{
"date": "2015-12-23",
"count": 1
},
{
"date": "2016-01-21",
"count": 1
},
{
"date": "2016-02-05",
"count": 1
},
{
"date": "2016-02-22",
"count": 1
},
{
"date": "2016-02-24",
"count": 1
},
{
"date": "2016-02-29",
"count": 1
},
{
"date": "2016-03-15",
"count": 1
},
{
"date": "2016-03-23",
"count": 1
},
{
"date": "2016-04-01",
"count": 1
},
{
"date": "2016-04-16",
"count": 1
},
{
"date": "2016-04-19",
"count": 1
},
{
"date": "2016-04-21",
"count": 1
},
{
"date": "2016-04-28",
"count": 1
},
{
"date": "2016-05-09",
"count": 1
},
{
"date": "2016-05-30",
"count": 1
},
{
"date": "2016-06-11",
"count": 1
},
{
"date": "2016-07-25",
"count": 1
},
{
"date": "2016-07-28",
"count": 1
},
{
"date": "2016-07-31",
"count": 1
},
{
"date": "2016-08-03",
"count": 1
},
{
"date": "2016-08-12",
"count": 1
},
{
"date": "2016-09-01",
"count": 1
},
{
"date": "2016-09-15",
"count": 1
},
{
"date": "2016-09-19",
"count": 1
},
{
"date": "2016-09-22",
"count": 1
},
{
"date": "2016-09-24",
"count": 1
},
{
"date": "2016-10-01",
"count": 1
},
{
"date": "2016-10-22",
"count": 1
},
{
"date": "2016-10-24",
"count": 1
},
{
"date": "2016-11-02",
"count": 1
},
{
"date": "2016-12-09",
"count": 1
},
{
"date": "2017-02-08",
"count": 1
},
{
"date": "2017-02-25",
"count": 2
},
{
"date": "2017-02-28",
"count": 1
},
{
"date": "2017-03-08",
"count": 1
},
{
"date": "2017-03-25",
"count": 1
},
{
"date": "2017-05-24",
"count": 1
},
{
"date": "2017-05-31",
"count": 1
},
{
"date": "2017-06-06",
"count": 1
},
{
"date": "2017-07-17",
"count": 1
},
{
"date": "2017-07-25",
"count": 1
},
{
"date": "2017-08-16",
"count": 1
},
{
"date": "2017-09-04",
"count": 1
},
{
"date": "2017-09-12",
"count": 2
},
{
"date": "2017-10-13",
"count": 1
},
{
"date": "2017-10-26",
"count": 1
},
{
"date": "2017-12-21",
"count": 1
},
{
"date": "2017-12-25",
"count": 4
},
{
"date": "2017-12-26",
"count": 2
},
{
"date": "2017-12-27",
"count": 1
},
{
"date": "2018-01-12",
"count": 1
},
{
"date": "2018-01-24",
"count": 1
},
{
"date": "2018-02-09",
"count": 1
},
{
"date": "2018-02-28",
"count": 1
},
{
"date": "2018-03-03",
"count": 1
},
{
"date": "2018-03-16",
"count": 1
},
{
"date": "2018-04-18",
"count": 1
},
{
"date": "2018-05-03",
"count": 1
},
{
"date": "2018-05-04",
"count": 1
},
{
"date": "2018-05-21",
"count": 1
},
{
"date": "2018-05-23",
"count": 1
},
{
"date": "2018-06-25",
"count": 1
},
{
"date": "2018-06-29",
"count": 1
},
{
"date": "2018-07-10",
"count": 1
},
{
"date": "2018-07-12",
"count": 1
},
{
"date": "2018-08-02",
"count": 1
},
{
"date": "2018-08-13",
"count": 1
},
{
"date": "2018-09-25",
"count": 1
},
{
"date": "2018-10-29",
"count": 1
},
{
"date": "2018-11-27",
"count": 1
},
{
"date": "2019-01-30",
"count": 1
},
{
"date": "2019-03-21",
"count": 1
},
{
"date": "2019-04-22",
"count": 1
},
{
"date": "2019-05-16",
"count": 1
},
{
"date": "2019-05-23",
"count": 1
},
{
"date": "2019-05-24",
"count": 1
},
{
"date": "2019-07-27",
"count": 1
},
{
"date": "2019-12-05",
"count": 1
},
{
"date": "2020-01-12",
"count": 1
},
{
"date": "2020-01-13",
"count": 1
},
{
"date": "2020-02-03",
"count": 1
},
{
"date": "2020-07-14",
"count": 1
},
{
"date": "2020-10-22",
"count": 1
},
{
"date": "2020-11-23",
"count": 1
},
{
"date": "2020-12-28",
"count": 1
},
{
"date": "2020-12-29",
"count": 1
},
{
"date": "2021-01-24",
"count": 2
},
{
"date": "2021-03-03",
"count": 1
},
{
"date": "2021-03-18",
"count": 1
},
{
"date": "2021-05-18",
"count": 1
},
{
"date": "2021-09-18",
"count": 1
},
{
"date": "2021-09-22",
"count": 1
},
{
"date": "2021-10-15",
"count": 1
},
{
"date": "2021-11-22",
"count": 1
},
{
"date": "2022-01-04",
"count": 1
},
{
"date": "2022-01-30",
"count": 1
},
{
"date": "2022-04-13",
"count": 1
},
{
"date": "2022-06-26",
"count": 1
},
{
"date": "2022-07-01",
"count": 1
},
{
"date": "2022-07-02",
"count": 1
},
{
"date": "2022-09-30",
"count": 1
},
{
"date": "2025-01-18",
"count": 1
},
{
"date": "2025-02-03",
"count": 1
},
{
"date": "2025-03-23",
"count": 1
},
{
"date": "2025-06-07",
"count": 1
},
{
"date": "2025-07-27",
"count": 1
},
{
"date": "2025-07-29",
"count": 1
}
],
"complete": true,
"collected": 547,
"total_stars": 547
},
"open_issues_and_prs": 9
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 72754,
"source_files_sampled": 26,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Gemfile"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "yard",
"direct": true,
"version": "0.8.7.6",
"severity": "high",
"ecosystem": "rubygems",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jfp-46x4-xgfj",
"GHSA-8mq4-9jjh-9xrc",
"GHSA-gj4p-3wh3-2rmf",
"GHSA-pxcc-8665-phx8",
"GHSA-xfhh-rx56-rxcr"
],
"fixed_version": "0.9.44",
"advisory_count": 5,
"oldest_advisory_days": 3134
},
{
"name": "json",
"direct": false,
"version": "2.1.0",
"severity": "high",
"ecosystem": "rubygems",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-jphg-qwrw-7w9g"
],
"fixed_version": "2.3.0",
"advisory_count": 1,
"oldest_advisory_days": 2185
},
{
"name": "rake",
"direct": true,
"version": "10.4.2",
"severity": "moderate",
"ecosystem": "rubygems",
"cvss_score": 6.4,
"advisory_ids": [
"GHSA-jppv-gw3r-w3q8"
],
"fixed_version": "12.3.3",
"advisory_count": 1,
"oldest_advisory_days": 2335
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 2,
"moderate": 1
},
"advisory_count": 7,
"affected_count": 3,
"assessed_count": 13,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 2
},
"ecosystems": [
"rubygems"
],
"dependencies": [
{
"name": "rake",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": ">= 12.3.3"
},
{
"name": "rspec",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": ">= 2.3.0"
},
{
"name": "simplecov",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 0.10"
},
{
"name": "yard",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 0.9.20"
},
{
"name": "rack",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "puma",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 5.6"
},
{
"name": "rake-compiler",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "webrick",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": "~> 1.8"
},
{
"name": "base64",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "ostruct",
"manifest": "Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "rake",
"direct": true,
"version": "10.4.2",
"ecosystem": "rubygems"
},
{
"name": "rake-compiler",
"direct": true,
"version": "0.9.5",
"ecosystem": "rubygems"
},
{
"name": "rspec",
"direct": true,
"version": "3.3.0",
"ecosystem": "rubygems"
},
{
"name": "simplecov",
"direct": true,
"version": "0.14.1",
"ecosystem": "rubygems"
},
{
"name": "yard",
"direct": true,
"version": "0.8.7.6",
"ecosystem": "rubygems"
},
{
"name": "diff-lcs",
"direct": false,
"version": "1.2.5",
"ecosystem": "rubygems"
},
{
"name": "docile",
"direct": false,
"version": "1.1.5",
"ecosystem": "rubygems"
},
{
"name": "json",
"direct": false,
"version": "2.1.0",
"ecosystem": "rubygems"
},
{
"name": "rspec-core",
"direct": false,
"version": "3.3.2",
"ecosystem": "rubygems"
},
{
"name": "rspec-expectations",
"direct": false,
"version": "3.3.1",
"ecosystem": "rubygems"
},
{
"name": "rspec-mocks",
"direct": false,
"version": "3.3.2",
"ecosystem": "rubygems"
},
{
"name": "rspec-support",
"direct": false,
"version": "3.3.0",
"ecosystem": "rubygems"
},
{
"name": "simplecov-html",
"direct": false,
"version": "0.10.1",
"ecosystem": "rubygems"
}
],
"collected": true,
"truncated": false,
"total_count": 13,
"direct_count": 5,
"indirect_count": 8
}
},
"maintainership": {
"issues": {
"open_prs": 3,
"merged_prs": 102,
"open_issues": 6,
"closed_ratio": 0.927,
"closed_issues": 76,
"closed_unmerged_prs": 16
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "julik",
"commits": 118,
"avatar_url": "https://avatars.githubusercontent.com/u/16446?v=4"
},
{
"type": "User",
"login": "TwP",
"commits": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/6323?v=4"
},
{
"type": "User",
"login": "marshall-lee",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/3194530?v=4"
},
{
"type": "User",
"login": "saeohioalpha",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/969559?v=4"
},
{
"type": "User",
"login": "olleolleolle",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/211?v=4"
},
{
"type": "User",
"login": "cdcooksey",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/1116789?v=4"
},
{
"type": "User",
"login": "luma",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/27842?v=4"
},
{
"type": "User",
"login": "kurowski",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/7466?v=4"
},
{
"type": "User",
"login": "terabyte",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/204385?v=4"
},
{
"type": "User",
"login": "juanger",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/5959?v=4"
}
],
"contributors_sampled": 37,
"top_contributor_share": 0.554
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 1,
"reason": "3 out of 18 merged PRs checked by a CI test -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 7,
"reason": "Found 16/21 approved changesets -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 14 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 2,
"reason": "3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "57be48b5ce5ff2260be180333039ca137ed21410",
"ran_at": "2026-07-22T00:18:18Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-06-30T21:18:19Z",
"oldest_open_prs": [
{
"number": 165,
"created_at": "2018-03-18T12:46:12Z",
"last_comment_at": "2025-02-27T21:59:17Z",
"last_comment_author": "julik"
},
{
"number": 202,
"created_at": "2026-07-14T12:36:12Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 203,
"created_at": "2026-07-14T12:38:09Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-06-22T10:08:26Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 138,
"created_at": "2016-09-07T00:10:30Z",
"last_comment_at": "2016-09-24T20:26:18Z",
"last_comment_author": "toland"
},
{
"number": 158,
"created_at": "2018-02-02T12:27:14Z",
"last_comment_at": "2025-01-17T12:01:22Z",
"last_comment_author": "julik"
},
{
"number": 173,
"created_at": "2019-06-04T21:59:32Z",
"last_comment_at": "2019-08-07T16:14:27Z",
"last_comment_author": "grosser"
},
{
"number": 179,
"created_at": "2020-04-24T22:36:46Z",
"last_comment_at": "2020-12-26T16:30:32Z",
"last_comment_author": "julik"
},
{
"number": 180,
"created_at": "2020-10-23T18:13:36Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 198,
"created_at": "2025-02-28T12:54:11Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/toland/patron",
"host": "github.com",
"name": "patron",
"owner": "toland"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"security": 43,
"vitality": 47,
"community": 66,
"governance": 65,
"engineering": 56
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 47,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"commits_last_year": 3,
"human_commit_share": 1,
"days_since_last_push": 29,
"active_weeks_last_year": 2
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 29 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 29
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "2/52 weeks with commits",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 2
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "3 commits in the last year",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 3
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "moderate",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"releases_count": 2,
"latest_release_tag": "v0.4.20",
"releases_from_tags": false,
"days_since_latest_release": 4380,
"mean_days_between_releases": 1.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4380 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 4380
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 29,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 29 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 29
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 66,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"forks": 74,
"stars": 547,
"watchers": 14,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "547 stars",
"points": 44.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 547
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "74 forks",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 74
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "14 watchers",
"points": 6.2,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 14
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"packages": [
"patron"
],
"dependents": null,
"ecosystems": "rubygems",
"total_downloads": 5865291,
"monthly_downloads": null
},
"components": [
{
"key": "total_downloads",
"name": "Total downloads",
"detail": "5,865,291 downloads all-time across rubygems",
"points": 70.3,
"status": "partial",
"details": [
{
"code": "downloads_total",
"params": {
"count": 5865291,
"ecosystems": "rubygems"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 65,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 37,
"top_contributor_share": 0.554
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 55% of commits",
"points": 10,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 55
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "37 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 37
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 87,
"inputs": {
"merged_prs": 102,
"open_issues": 6,
"closed_issues": 76,
"issue_closed_ratio": 0.927,
"closed_unmerged_prs": 16
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "93% of issues closed",
"points": 43.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 93
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "102/118 decided PRs merged",
"points": 33.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 102,
"decided": 118
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 16/21 approved changesets -- score normalized to 7",
"points": 10.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"followers": 108,
"owner_type": "User",
"is_verified": null,
"owner_login": "toland",
"public_repos": 22,
"account_age_days": 6683
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "108 followers of toland",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 108,
"login": "toland"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "22 public repos, account ~18 yr old",
"points": 21.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 22
}
},
{
"code": "account_age_years",
"params": {
"years": 18
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"packages": [
"patron"
],
"ecosystems": "rubygems",
"any_deprecated": false,
"min_days_since_publish": 509
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on rubygems",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "rubygems"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 509 days ago",
"points": 14,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 509
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "40 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 40
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 56,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "3 out of 18 merged PRs checked by a CI test -- score normalized to 1",
"points": 2,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "http://toland.github.com/patron/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://toland.github.com/patron/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 43,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "3 out of 18 merged PRs checked by a CI test -- score normalized to 1",
"points": 0.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 16/21 approved changesets -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 14 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 13 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 13
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 56,
"inputs": {
"source": "osv",
"advisories": 7,
"affected_packages": 3,
"assessed_packages": 13,
"unassessed_packages": 0,
"affected_by_severity": "high 2, moderate 1",
"direct_affected_packages": 2
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "2 affected: yard 0.8.7.6 (high 7.5), rake 10.4.2 (moderate 6.4)",
"points": 12.1,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 2,
"packages": "yard 0.8.7.6 (high 7.5), rake 10.4.2 (moderate 6.4)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "2 advisory-carrying package(s) unaddressed past 90 days; oldest published 3134 days ago",
"points": 29.7,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 2,
"oldest": 3134
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 13,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 25
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 44,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.57,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "57 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 30.4,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 57,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 72754,
"source_files_sampled": 26,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/26 source files over 60KB",
"points": 52.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 26,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-22T00:18:45.129996Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/toland/patron.svg",
"full_name": "toland/patron",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with toland/patron. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
