Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-24 16:30 UTC
trzsz / tsshd
tsshd is a UDP-based SSH server built for unreliable networks. It supports seamless roaming across networks and IP changes, and works well on high-latency links such as cellular connections and unstable Wi-Fi.
trzsz/tsshd holds a health index of 66 out of 100, placing it in the Moderate band. It scores highest on Vitality (86/100) and lowest on Security (51/100). It was last updated 6 days ago. A single contributor accounts for most of its recent work.
66
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
66
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
trzszOrganization
77 followers35 public repossince Dec 2021
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/trzsz/tsshd | v0.1.9 | - | 24 | 6 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
86
Development activity
88Excellent
How it's scored
| 36/36 | Push recency — last push 6 days ago |
| 24.2/36 | Commit cadence — 35/52 weeks with commits |
| 18/18 | Commit volume — 107 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 107 |
| human_commit_share | 1 |
| days_since_last_push | 6 |
| active_weeks_last_year | 35 |
Release discipline
83Good
How it's scored
| 27/27 | Ships releases — 10 releases published |
| 36/36 | Release recency — latest release 6 days ago |
| 19.8/27 | Release cadence — a release every ~83.9 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 10 |
| latest_release_tag | v0.1.9 |
| releases_from_tags | no |
| days_since_latest_release | 6 |
| mean_days_between_releases | 83.9 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
54
Popularity & adoption
57Moderate
How it's scored
| 43.8/60 | Stars — 502 stars |
| 10.8/25 | Forks — 21 forks |
| 2.7/15 | Watchers — 4 watchers |
Inputs used
| forks | 21 |
| stars | 502 |
| watchers | 4 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
63
Maintainer resilience (bus factor)
24Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 2.1/22.5 | Commit distribution — top contributor authored 91% of commits |
| 9.5/13.5 | Contributor breadth — 7 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 7 |
| top_contributor_share | 0.906 |
How it's scored
| 46.8/46.8 | Issue resolution — 100% of issues closed |
| 32.4/38.3 | PR acceptance — 11/13 decided PRs merged |
| 1.5/15 | OpenSSF Scorecard: Code-Review — Found 3/30 approved changesets -- score normalized to 1 |
Inputs used
| merged_prs | 11 |
| open_issues | 0 |
| closed_issues | 26 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 2 |
Ownership & stewardship
64Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 13.6/25 | Owner reach — 77 followers of trzsz |
| 20.6/25 | Track record — 35 public repos, account ~4 yr old |
Inputs used
| followers | 77 |
| owner_type | Organization |
| is_verified | — |
| owner_login | trzsz |
| public_repos | 35 |
| account_age_days | 1,684 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 6 days ago |
| 20/20 | Version history — 24 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/trzsz/tsshd |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 6 |
Engineering Quality
Are baseline engineering and documentation practices in place?
71
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 3 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
75Good
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://trzsz.github.io/tsshd |
| 10/10 | Repository description |
| 10/10 | Topics — 11 topics |
| 10/10 | Wiki |
Inputs used
| topics | lrzsz, mosh, rz, ssh, ssh-server, sz, trz, trzsz, tsz, tssh, tsshd |
| has_wiki | yes |
| homepage | https://trzsz.github.io/tsshd |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
51
Security posture
41At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0.8/7.5 | Code-Review — Found 3/30 approved changesets -- score normalized to 1 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 18 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 0 |
| scorecard_aggregate | 4.1 |
Dependency advisories
89Excellent
How it's scored
| 26.6/35 | Direct dependencies free of known advisories — 1 affected: golang.org/x/crypto v0.54.0 (unknown) |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 40/40 | No advisories left outstanding — no advisory has been public longer than 90 days |
Inputs used
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 49 |
| unassessed_packages | 0 |
| affected_by_severity | unknown 1 |
| direct_affected_packages | 1 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 49 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
54
Agent context & guidance
29Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 29.3/40 | Legible commit history — 55 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.55 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
61Moderate
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | examples/go.mod, go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/39 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 41,440 |
| source_files_sampled | 39 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
502GitHub stars
7contributors
107commits, last 12 months
6days since last push
10releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 21 ⇿
0Stars
21Forks
7Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 7
Each point covers 2 days.
OpenSSF Scorecard 4.1 / 10
4.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 1 | Code-Review | Found 3/30 approved changesets -- score normalized to 1 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Direct dependencies 13
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/Microsoft/go-winio | v0.6.2 | go.mod |
| Go | github.com/UserExistsError/conpty | v0.1.4 | go.mod |
| Go | github.com/creack/pty | v1.1.24 | go.mod |
| Go | github.com/google/shlex | v0.0.0-20191202100458-e7afc7fbc510 | go.mod |
| Go | github.com/rcarmo/go-te | v0.1.0 | go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | go.mod |
| Go | github.com/trzsz/kcp-go/v5 | v5.6.72 | go.mod |
| Go | github.com/trzsz/quic-go | v0.60.1 | go.mod |
| Go | github.com/trzsz/shellescape | v1.6.0 | go.mod |
| Go | github.com/trzsz/smux | v1.6.0 | go.mod |
| Go | golang.org/x/crypto | v0.54.0 | go.mod |
| Go | golang.org/x/net | v0.57.0 | go.mod |
| Go | golang.org/x/sys | v0.47.0 | go.mod |
All dependencies 49
Full resolved dependency set from the GitHub dependency graph: 13 direct and 36 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/creack/pty | v1.1.24 | direct |
| Go | github.com/google/shlex | v0.0.0-20191202100458-e7afc7fbc510 | direct |
| Go | github.com/microsoft/go-winio | v0.6.2 | direct |
| Go | github.com/rcarmo/go-te | v0.1.0 | direct |
| Go | github.com/stretchr/testify | v1.11.1 | direct |
| Go | github.com/trzsz/kcp-go/v5 | v5.6.72 | direct |
| Go | github.com/trzsz/quic-go | v0.60.1 | direct |
| Go | github.com/trzsz/shellescape | v1.6.0 | direct |
| Go | github.com/trzsz/smux | v1.6.0 | direct |
| Go | github.com/userexistserror/conpty | v0.1.4 | direct |
| Go | golang.org/x/crypto | v0.54.0 | direct |
| Go | golang.org/x/net | v0.57.0 | direct |
| Go | golang.org/x/sys | v0.47.0 | direct |
| Go | charm.land/bubbletea/v2 | v2.0.8 | indirect |
| Go | charm.land/lipgloss/v2 | v2.0.5 | indirect |
| Go | charm.land/log/v2 | v2.0.0 | indirect |
| Go | charm.land/wish/v2 | v2.0.1 | indirect |
| Go | github.com/anmitsu/go-shlex | v0.0.0-20200514113438-38f4b401e2be | indirect |
| Go | github.com/charmbracelet/colorprofile | v0.4.3 | indirect |
| Go | github.com/charmbracelet/keygen | v0.5.4 | indirect |
| Go | github.com/charmbracelet/ssh | v0.0.0-20250826160808-ebfa259c7309 | indirect |
| Go | github.com/charmbracelet/ultraviolet | v0.0.0-20260713092251-4bee1914c0cf | indirect |
| Go | github.com/charmbracelet/x/ansi | v0.11.7 | indirect |
| Go | github.com/charmbracelet/x/conpty | v0.2.0 | indirect |
| Go | github.com/charmbracelet/x/term | v0.2.2 | indirect |
| Go | github.com/charmbracelet/x/termios | v0.1.1 | indirect |
| Go | github.com/charmbracelet/x/windows | v0.2.2 | indirect |
| Go | github.com/clipperhouse/displaywidth | v0.11.0 | indirect |
| Go | github.com/clipperhouse/uax29/v2 | v2.7.0 | indirect |
| Go | github.com/davecgh/go-spew | v1.1.1 | indirect |
| Go | github.com/go-logfmt/logfmt | v0.6.1 | indirect |
| Go | github.com/klauspost/cpuid/v2 | v2.4.0 | indirect |
| Go | github.com/klauspost/reedsolomon | v1.14.1 | indirect |
| Go | github.com/kr/text | v0.2.0 | indirect |
| Go | github.com/lucasb-eyer/go-colorful | v1.4.0 | indirect |
| Go | github.com/mattn/go-runewidth | v0.0.24 | indirect |
| Go | github.com/muesli/cancelreader | v0.2.2 | indirect |
| Go | github.com/pkg/errors | v0.9.1 | indirect |
| Go | github.com/pmezard/go-difflib | v1.0.0 | indirect |
| Go | github.com/rivo/uniseg | v0.4.7 | indirect |
| Go | github.com/tjfoc/gmsm | v1.4.1 | indirect |
| Go | github.com/xo/terminfo | v0.0.0-20220910002029-abceb7e1c41e | indirect |
| Go | go.uber.org/mock | v0.6.0 | indirect |
| Go | golang.org/x/exp | v0.0.0-20260709172345-9ea1abe57597 | indirect |
| Go | golang.org/x/sync | v0.22.0 | indirect |
| Go | golang.org/x/term | v0.45.0 | indirect |
| Go | golang.org/x/text | v0.40.0 | indirect |
| Go | golang.org/x/time | v0.15.0 | indirect |
| Go | gopkg.in/yaml.v3 | v3.0.1 | indirect |
Dependency advisories 1
This repository publishes no package the index resolves, so its own dependency graph was assessed — 49 packages, which also include development and test pins that never ship: 1 carry known advisories, of which 1 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| golang.org/x/crypto | v0.54.0 | direct | unknown | 1 | — |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"lrzsz",
"mosh",
"rz",
"ssh",
"ssh-server",
"sz",
"trz",
"trzsz",
"tsz",
"tssh",
"tsshd"
],
"is_fork": false,
"size_kb": 555,
"has_wiki": true,
"homepage": "https://trzsz.github.io/tsshd",
"languages": {
"Go": 392105,
"Makefile": 1189
},
"pushed_at": "2026-07-17T22:31:01Z",
"created_at": "2024-06-08T01:55:24Z",
"owner_type": "Organization",
"updated_at": "2026-07-19T20:12:27Z",
"description": "tsshd is a UDP-based SSH server built for unreliable networks. It supports seamless roaming across networks and IP changes, and works well on high-latency links such as cellular connections and unstable Wi-Fi.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "trzsz",
"company": null,
"location": null,
"followers": 77,
"avatar_url": "https://avatars.githubusercontent.com/u/96032697?v=4",
"created_at": "2021-12-13T02:21:26Z",
"is_verified": null,
"public_repos": 35,
"account_age_days": 1684
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2026-07-17T22:38:26Z"
},
{
"tag": "dev",
"kind": "other",
"published_at": "2026-07-17T22:26:03Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2026-05-10T09:41:45Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2026-05-03T00:51:04Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2026-01-17T13:20:19Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2025-10-26T01:12:20Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2024-08-18T09:00:48Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2024-07-07T02:53:07Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2024-06-30T02:26:39Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2024-06-23T05:44:01Z"
}
],
"recent_commits": [
{
"oid": "bb9f1207c9a11f66ceafbe8594aa1b0a47fc599f",
"body": null,
"is_bot": false,
"headline": "bump version to v0.1.9",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-07-17T22:22:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e1359d97be85f920db43b9bc895c7bcc8b1bce9",
"body": null,
"is_bot": false,
"headline": "feat: add ProxyCommand support (implies TCP proxy mode)",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-07-04T22:33:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a37e24c39be5afee4afbad78e3091ff55ff9e3ae",
"body": null,
"is_bot": false,
"headline": "feat: show foreground process name when title is empty",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-27T22:25:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "921909898a874d0e85ecdc24d6b602d7ec91d5e1",
"body": "Remove the -1 offset previously applied to the terminal column width\nduring ConPTY creation and resizing. Providing the exact terminal\ndimensions prevents layout misalignment in Neovim (0.12.3).\n\nNote: This effectively reverts the column width adjustment\nand may conflict with the previous fix for #7.",
"is_bot": false,
"headline": "fix neovim display misalignment on Windows 11 ARM64",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-27T08:53:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2f3eb4a37f1ebe8db792c647a5c45d06f2c42f6",
"body": null,
"is_bot": false,
"headline": "docs: update UDP reconnect and timeout configuration docs",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-27T08:13:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2472c122d3d155e56e75fc6726e1f720f014cc6",
"body": null,
"is_bot": false,
"headline": "feat(client): add RTT callback for heartbeat acknowledgements",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-27T07:28:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7713cd6be7b15ef781cd57aa215933c914e2f01d",
"body": "…lues\n\nRemove unnecessary named return values and ensure deferred cleanup\ncannot accidentally expose partially initialized objects or trigger\nunexpected panic paths.",
"is_bot": false,
"headline": "fix(client): avoid defer and goroutine bugs caused by named return va…",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-20T23:56:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "754502eedfc93268907d54c22d6574ee2ce2d92c",
"body": "With packet replay removed from the proxy layer, non-attachable KCP\nconnections no longer need proxy-managed encryption.\n\nMove crypto ownership back to the KCP transport, simplify key\nmanagement, and keep proxy-level crypto only where required for\nattachable-mode rekey support.",
"is_bot": false,
"headline": "remove unnecessary proxy crypto delegation",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-20T23:11:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af9a4815f529466b3ea79083b6e65ffd45760b94",
"body": "Remove packet caching and replay logic from the proxy. Packets are\nnow silently dropped while the backend connection is unavailable.\n\nAfter reconnection, reset the transport loss-detection state instead of\nreplaying cached packets:\n- QUIC: ResetPTO()\n- KCP: ResetRTO()\n\nThis significantly simplifies the reconnect path, removes packet cache\nmanagement, and relies on the transport layer to recover lost traffic.",
"is_bot": false,
"headline": "replace packet replay with PTO/RTO reset on reconnect",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-20T16:05:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bd47e6b6bc7ddc608a27842a2081224afb0c66c",
"body": null,
"is_bot": false,
"headline": "feat: add support for detaching sessions without termination",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-07T04:00:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12b2a80cbb1fd9f3499c156bc1333d97b18ebeec",
"body": null,
"is_bot": false,
"headline": "feat: support discarding previous terminal output #39",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-07T02:50:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b0d7f7b85b1e8704c93158652add5d746202f9d",
"body": "This change redesigns packet caching to mitigate ACK packet dominance\nduring reconnection cycles.\n\nPacketCache now separates traffic into:\n- reactive: packets sent shortly after peer activity (likely ACKs)\n- proactive: packets sent after inactivity (likely recovery/heartbeat)\n\nThis prevents ACK bursts from evicting critical recovery packets and\nimproves reconnection stability in high-load scenarios.",
"is_bot": false,
"headline": "fix: introduce dual-channel packet cache for recovery stability",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-06T00:12:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe8e6764175063ffc73ac169cde895d993c9f172",
"body": null,
"is_bot": false,
"headline": "release stale client resources and enhance concurrency safety",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-05T19:39:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "184a045fccbb415fe248e34096cf55edc6702248",
"body": null,
"is_bot": false,
"headline": "fix: initialize active checker before client setup",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-06-01T05:20:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6064b2583f7ed988ecf5b6ffd89f04a40c587b5",
"body": null,
"is_bot": false,
"headline": "improve transport recovery and diagnostics",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-31T09:39:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d3be8701e96ff8225aa6c36786e889b05d4c88d",
"body": null,
"is_bot": false,
"headline": "safely discard stale cached output on PTY reattachment #39",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-31T01:57:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12a873c528e4843905f273e608fd2f89f5387edb",
"body": null,
"is_bot": false,
"headline": "pace packet cache flushing and run it asynchronously",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-31T00:11:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "096afb7c47242be85c68350ad4726fba9f1b002f",
"body": "…n issues #37\n\nThis change improves connection teardown, stream replacement and attach handling\nto prevent blocked shutdowns, leaked goroutines and retained buffers.\n\nKey fixes include:\n\n- make replaceable stream closing asynchronous to avoid attach blocking\n- use QUIC CancelWrite to discard blocked\n[…]\nace buffer copy bug\n- add regression tests for rotating crypto packet sealing/opening\n\nThese changes significantly reduce memory retention during reconnects,\nstalled writes and repeated attach cycles.",
"is_bot": false,
"headline": "fix: resolve blocking operations, goroutine leaks and memory retentio…",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-29T16:10:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9f183e62333a2be95c3090a910871485ec73d751",
"body": "Previously, `replaceableStream` could block indefinitely if the underlying\n`Stream.Write` operation hung, preventing stream replacement or teardown\nand potentially freezing the SSH attachment session.",
"is_bot": false,
"headline": "fix: make stream writes interruptible to prevent blocking #37",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-24T18:08:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a54c31c29cc2c57434a1342e63d344825f55447",
"body": null,
"is_bot": false,
"headline": "ci: fix GoReleaser versioning and SemVer parsing errors",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-24T06:30:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db5de8d605e8e217b62128b72c0cf242411f5384",
"body": "* ci: add GitHub Workflow for auto deploying development builds\n\n* docs: add links to development pre-releases in README\n\n* ci: remove redundant go-release-snapshot job from gotest workflow",
"is_bot": false,
"headline": "ci: add automatic pre-release deployment (#38)",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-24T06:03:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8836ff6e1d2c4d59d207aa56a47c6301922e2a89",
"body": null,
"is_bot": false,
"headline": "docs: add tsshd attach session screenshot",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-23T18:32:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fabbb77bea4c7f284e772ec8b4a5a36362785a7b",
"body": null,
"is_bot": false,
"headline": "feat: implement session management and attachment #35",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-23T15:39:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5bab52c8f66f9cd073406f0fd44f7a727a48a1c",
"body": "* fix: close parked accept connections the client never claims\n\nAgent/X11 forwarding and -R remote forwarding park each accepted local\nconnection in fwdAcceptMap and wait for the client to open the matching\nchannel. When the client never claims it -- for example, agent forwarding\nwhose upstream ssh-\n[…]\n the reaper right after parking.\n\n* test: move reaper tests into forward_test.go\n\nPer review feedback, keep server_test.go focused and house the\naccept-conn reaper tests alongside the code they cover.",
"is_bot": false,
"headline": "fix: close parked accept connections the client never claims (#36)",
"author_name": "Alice",
"author_login": "aliceisjustplaying",
"committed_at": "2026-05-21T08:30:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f942c17d4a6807126b15d2f1fa36a09da19683f",
"body": null,
"is_bot": false,
"headline": "docs: update description to include auto-reconnect and add screenshots",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-15T16:37:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a68bb5fe265b72d0f5dae67e8a1fcab750eafae",
"body": null,
"is_bot": false,
"headline": "bump version to v0.1.8",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-10T09:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4a5c8cb9b86eafa86a9b78ac161537413683cfb",
"body": null,
"is_bot": false,
"headline": "build: update package metadata, docs, and dependencies",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-09T15:18:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d724c07f5f351e3b00637a44f88c06ded5baed4e",
"body": null,
"is_bot": false,
"headline": "ensure force quit timer starts immediately on signal",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-09T15:03:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b1083062a0bcfba5e30ee869718bbf040737b0c",
"body": null,
"is_bot": false,
"headline": "fix: avoid shared QUIC config mutation (#33)",
"author_name": "mookim.eth",
"author_login": "mookim-eth",
"committed_at": "2026-05-07T11:01:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ce5dde776cf67bd1417797cd9682c7b914bfcdf",
"body": null,
"is_bot": false,
"headline": "fix: reject empty subsystem commands (#34)",
"author_name": "mookim.eth",
"author_login": "mookim-eth",
"committed_at": "2026-05-07T10:43:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "083aa5607b7cf6989217c12742d48229b7640d54",
"body": "fix: ignore unsupported sshd_config Match criteria",
"is_bot": false,
"headline": "Merge pull request #32 from mookim-eth/fix-unsupported-match-criteria",
"author_name": "mookim.eth",
"author_login": "mookim-eth",
"committed_at": "2026-05-07T09:49:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f08385d326f4c6d0ac3c5216de8d63be1aeed07",
"body": "fix: evaluate Match Group negations across all groups",
"is_bot": false,
"headline": "Merge pull request #31 from mookim-eth/fix-match-group-negation",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-07T09:33:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e37e220f9a36cf37994ef324e853135e31d8d402",
"body": null,
"is_bot": false,
"headline": "test: reduce QUIC initial packet size flakiness",
"author_name": "mookim",
"author_login": "mookim-eth",
"committed_at": "2026-05-07T09:21:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34091665639e6218387229b42cfb756562cdc9c0",
"body": null,
"is_bot": false,
"headline": "fix: evaluate Match Group negations across all groups",
"author_name": "mookim",
"author_login": "mookim-eth",
"committed_at": "2026-05-07T07:43:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9756a2acd81e7222bf29a4fd19f2645e75ecc46",
"body": null,
"is_bot": false,
"headline": "ensure force quit timer starts immediately on signal",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-05T07:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cd4d8f6b9786c25be35b738582f39628c43e3d2",
"body": null,
"is_bot": false,
"headline": "avoid garbled input by skipping marker if no active sessions #30",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-05T05:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d0e845de4c62fecd1add6785d81541ece576eb8",
"body": "The bus stream could be polluted by concurrent diagnostic logs (debug or\nwarning messages) before the handshake ACK was fully transmitted. This\ninterleaving caused protocol corruption on the client side.",
"is_bot": false,
"headline": "fix: hold bus lock until ACK is sent to prevent premature usage #30",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-05T02:50:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2657ef4132d6fce4aa41644d91440887aa537813",
"body": "…ate #30",
"is_bot": false,
"headline": "fix(debug): correct diagnostic data in logs and fix shared logging st…",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-04T16:56:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebbc5451aae83de6675680ecc9a5b8fb8eb58c81",
"body": null,
"is_bot": false,
"headline": "build: isolate Go build environment in debian/rules",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-04T16:13:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e1f8adde8a92267ffa5b2d1fb4316b63413b57f",
"body": null,
"is_bot": false,
"headline": "docs: update documentation links and refine installation guide",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-03T05:51:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a0d945ffdb38ab5ba3e468b1b11df71fccc540c",
"body": null,
"is_bot": false,
"headline": "bump version to v0.1.7",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-03T00:23:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9598e1289056c9936b13f3963facb53a465e5c95",
"body": null,
"is_bot": false,
"headline": "feat: introduce middleware framework for custom SSH business logic #29",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-05-01T16:51:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51ae27ff69ff5ed347e99564737caccc95b3ac68",
"body": null,
"is_bot": false,
"headline": "refactor: optimize error handling and improve readability",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-04-25T07:35:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bec37ca607ccc1947b7292d281361a3c29b55448",
"body": null,
"is_bot": false,
"headline": "suppress noisy logs on client-initiated UDP connection closure",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-04-24T17:57:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "775481f1af58e1ef0eb0007438a6a0f9a196dc6f",
"body": "… options",
"is_bot": false,
"headline": "refactor: centralize safe unix socket cleanup and align unixgram bind…",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-04-18T07:00:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "157ecefceb9edfafc24fd37894fe1a9f649285b3",
"body": "feat: honor StreamLocalBindMask and StreamLocalBindUnlink with safe cleanup",
"is_bot": false,
"headline": "Merge pull request #27 from ernie/stream-local-bind",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-04-15T12:20:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b95b617f3b40e2d2258ce1fbfadaff5a10b19ed4",
"body": "On exit, only remove the forwarded unix socket if the path still refers\nto the same file we created. If another process has replaced it in the\ninterim (e.g. a subsequent bind from a different owner), skip the\nremoval to avoid stealing their socket.\n\nRecorded via os.Stat after a successful Listen; compared via\nos.SameFile at cleanup time.",
"is_bot": false,
"headline": "fix: guard unix socket cleanup with dev/inode identity check",
"author_name": "Ernie Miller",
"author_login": "ernie",
"committed_at": "2026-04-15T11:57:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2bd7d8211821da37af1d9b80cb829ec2fd29680",
"body": "Align unix-socket remote forwarding with OpenSSH, driven entirely by\nsshd_config — no client-side signaling.\n\n- Before Listen on a unix socket, honor StreamLocalBindUnlink=yes:\n lstat the path, unlink if it is a socket, refuse otherwise, debug-log\n on successful removal.\n- After Listen on a unix s\n[…]\n(default 0177 per OpenSSH). chmod failure is a warning, not fatal.\n\nAvoids the process-global umask dance and the custom streamlocal-unbind\nstream command in favor of straightforward, per-side policy.",
"is_bot": false,
"headline": "feat: honor StreamLocalBindMask and StreamLocalBindUnlink",
"author_name": "Ernie Miller",
"author_login": "ernie",
"committed_at": "2026-04-15T11:57:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6145d1530c8b3a813c55724cc5603948efbd4b08",
"body": "Fix case mismatch in default acceptenv values",
"is_bot": false,
"headline": "Merge pull request #26 from kitknox/acceptenv",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-04-06T16:24:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a66ca51104b48ec05d9c423ceeb509769c8caa2a",
"body": null,
"is_bot": false,
"headline": "Fix case mismatch in default acceptenv values",
"author_name": "Kit Knox",
"author_login": "kitknox",
"committed_at": "2026-04-06T15:48:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb8f69a5a4b9e91b8d819028fce3b0208bcd895e",
"body": null,
"is_bot": false,
"headline": "default AcceptEnv to LANG and LC_* for distro compatibility #25",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-04-06T15:35:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f792cdc9dffc99ac4fb6978d918ac6a4fe5244df",
"body": null,
"is_bot": false,
"headline": "feat: implement AcceptEnv support aligned with OpenSSH",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-04-04T17:28:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98423181157deefb007f65a69197476dc0d57cb4",
"body": null,
"is_bot": false,
"headline": "fix potential reconnection stalls and improve observability",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-04-04T16:08:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50e1a5c5f44c952ae064ed1fbb4e3676c1803d5a",
"body": "Fixes a race condition where an immediate check of the asynchronous\nserverChecker flag could trigger an unnecessary reconnection loop\nright after a new transport path is established.",
"is_bot": false,
"headline": "fix(client): prevent premature reconnection due to async timeout flag",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-30T16:33:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6857e9c0f15bf640cd5b321992454d61d1d1d87a",
"body": null,
"is_bot": false,
"headline": "update readme and workflow",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-28T03:23:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7918c43b00253873523707c5011a625117c994d6",
"body": "…ig file #22",
"is_bot": false,
"headline": "use \"$XDG_CONFIG_HOME/tsshd/sshd_config\" as the highest-priority conf…",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-21T22:35:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2bd78c2ef122f76381dcf31dd11cbb5172237f1",
"body": "…on across rekey",
"is_bot": false,
"headline": "refactor(kcp): delegate crypto to proxy and fix stale packet encrypti…",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-21T11:29:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0d5f3aa46fe3003bc7142f517203d0048148f4a",
"body": null,
"is_bot": false,
"headline": "improve keepalive logging for reconnect and stabilization diagnostics",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-20T22:09:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f858010d1ec6a683545f5f098df568ae342aa2a",
"body": "… #20",
"is_bot": false,
"headline": "support per-session discardPendingInput and simplify discard callback…",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-20T16:32:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3af0da8020bf98a181c585f394600f04a4ed037e",
"body": "Experimental attempt to address QUIC connections that remain\nstuck in the auth stage. May help resume communication, but\nnot guaranteed to fix the issue.",
"is_bot": false,
"headline": "flush cached UDP packets after auth stage timeout",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-17T23:52:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a45f0b2fc9c3606413f767f30607d86dbe90cf72",
"body": "skip close delay when old client already timed out",
"is_bot": false,
"headline": "Merge pull request #19 from kitknox/timeout",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-17T00:42:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb145c84d6aa271175af501b5483a64807339770",
"body": null,
"is_bot": false,
"headline": "skip close delay when old client already timed out",
"author_name": "Kit Knox",
"author_login": "kitknox",
"committed_at": "2026-03-17T00:35:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfdef821f776f3b7739e9c0fd809c773c9efd784",
"body": null,
"is_bot": false,
"headline": "fix: pass DISPLAY and SSH_AUTH_SOCK to session env",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-15T10:35:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "925c1f4f82cdb91a72847e49ce6caad042dadc83",
"body": null,
"is_bot": false,
"headline": "optimize caching of output without newline",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-14T19:55:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcf0ac53a3cee8db1de03b0f12b7ca7571522b7e",
"body": "… or device reboot #15\n\nBased on #16 by Kit Knox <kit@rootshell.com>",
"is_bot": false,
"headline": "Refactor: remove local listener and support attach after app relaunch…",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-14T16:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73fb2741e13976f8197b2773cf81499b718d1a09",
"body": "Instructions for Homebrew",
"is_bot": false,
"headline": "Merge pull request #17 from chrisfinazzo/update-readme",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-03-13T04:11:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22328b77555fa596e88f584230e11518612379df",
"body": null,
"is_bot": false,
"headline": "Instructions for Homebrew",
"author_name": "chrisfinazzo",
"author_login": "chrisfinazzo",
"committed_at": "2026-03-13T03:53:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65799ae3dd1c23699d0c847d0728716e87a7ef66",
"body": null,
"is_bot": false,
"headline": "support custom MTU",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-02-20T16:43:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "327f77bda87bd75cd274b240e9162c3398f35fac",
"body": null,
"is_bot": false,
"headline": "support UDP Port Forwarding",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-02-08T11:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "348ee5b4ec220928cdee4535b53e3a58e231e4f8",
"body": null,
"is_bot": false,
"headline": "support unixgram for UDP local forwarding",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-25T13:53:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0201247bca37813918c141af1ff93bc7cf19e572",
"body": null,
"is_bot": false,
"headline": "improve robustness and diagnostics",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-24T02:19:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eab4a26222b051b7bf888755403563a950f2342e",
"body": null,
"is_bot": false,
"headline": "bump version to v0.1.6 and enforce minimum version",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-17T12:57:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "350f4dd7291a72b4471a4c6c84b64faae7495fcb",
"body": null,
"is_bot": false,
"headline": "fix minor issues",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-17T12:36:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7838a92ef020eebb211689e60c2b751f64c46a74",
"body": null,
"is_bot": false,
"headline": "kcp: introduce rekey support",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-17T10:53:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d368dbe6095dc929317be3cbb7c6348bf5f4db9",
"body": null,
"is_bot": false,
"headline": "reduce number of keep-alive UDP packets #13",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-17T01:15:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c391d382c7c8803cca00cc3d817d4872e8ab5397",
"body": null,
"is_bot": false,
"headline": "clarify description as udp server",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-16T22:06:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7fdc9613206935637460e5d58feafd5b269433d4",
"body": null,
"is_bot": false,
"headline": "Makefile: improve Windows support",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-16T17:23:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "565fb9eff29388d6810088accd6aea8eb111bda3",
"body": null,
"is_bot": false,
"headline": "fix(quic): fix QUIC packets being sent too frequently #13",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-11T15:28:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7944f616badf7be32a0e9dcd1781a2ec300d73e4",
"body": null,
"is_bot": false,
"headline": "support multiple and discrete port ranges",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-11T15:16:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4e0bbd1c9fc9adcb488b9c481dd0dc7a02f5594",
"body": null,
"is_bot": false,
"headline": "extract commit id from go module path for -V",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-10T14:57:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a379cc272c372494b0da97ed548c64e8e9b8e5ec",
"body": null,
"is_bot": false,
"headline": "support X11UseLocalhost and XAuthLocation for X11 forwarding",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-10T07:02:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13d0d4f058160a9e2c4fcf33d8c50f7aece56dd1",
"body": null,
"is_bot": false,
"headline": "add commit id output to -V",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-10T01:11:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d0f6ebaea84907c57de157e51fdf7dd68736710",
"body": null,
"is_bot": false,
"headline": "restrict agent pipe access to current user on Windows",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-09T16:03:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74abed74998951e9e41c0f04f02e4a0f48cf816f",
"body": null,
"is_bot": false,
"headline": "update copyright",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-03T12:08:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e0d02fd6e82981cc673cd71e168bccd9f6eb961",
"body": null,
"is_bot": false,
"headline": "filter ESC[6n and fix minor issues",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2026-01-03T12:05:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1055342cb2f17e7bbe1615d391b3976192717007",
"body": null,
"is_bot": false,
"headline": "optimize proxy jump forwarding throughput",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-12-28T15:10:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7abd907687b2920755793d267bbafa519b2339a9",
"body": null,
"is_bot": false,
"headline": "discard pending output during client disconnection #12",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-12-27T14:20:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37181ba0dfad59f96bcd00ac4f1abef593e396d5",
"body": "…bility and usage",
"is_bot": false,
"headline": "refactor(proxyjump): restructure implementation; improve QUIC compati…",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-12-21T12:54:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48443bba1c60bca9b03552bad22f619f6c334d2b",
"body": null,
"is_bot": false,
"headline": "feat: support UDP-over-TCP (#9) and block I/O while disconnected",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-12-14T13:09:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2abede7e37c269914a4334c8fcc71629e7f936f",
"body": null,
"is_bot": false,
"headline": "discard pending input",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-12-07T15:10:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cce42ada2d4a8334f864483f18a2ceba32d69949",
"body": null,
"is_bot": false,
"headline": "optimize exit and add debugging",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-11-30T14:22:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47f00f0c2568b514bd30d36b854c5b8ae32ac10d",
"body": null,
"is_bot": false,
"headline": "build deb package",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-11-28T16:53:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "486d5b90cb84e1bb340fb8f58a0bb815352989f1",
"body": null,
"is_bot": false,
"headline": "fix redraw issue in screen",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-11-24T05:37:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58dfd13bb4dcaf38627d5113eb633c41efd84a09",
"body": "- support subsystem for scp and sftp\n- add access control for forwarding\n- optimize keep alive for better reliability",
"is_bot": false,
"headline": "support subsystem, forwarding access control and optimize keep alive",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-11-23T12:25:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e694f4569d42608dc788ae876bc899e0b53288bf",
"body": null,
"is_bot": false,
"headline": "fix ipv6 support",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-11-16T09:51:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e225bc1726cf66b3853cecf2c3659d2809e0ed1",
"body": null,
"is_bot": false,
"headline": "listen on appropriate IP address",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-11-10T17:55:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd58fe06880cdf418874f10e77a084b3baf04bb3",
"body": null,
"is_bot": false,
"headline": "refactored and fully support ProxyJump",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-11-09T13:59:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af3868ce77b15ca4f5da227adad1218675dfd35a",
"body": null,
"is_bot": false,
"headline": "listens on ipv4 and ipv6",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-11-02T15:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4c5a465d0bd5fb9331081c227432af73911726e",
"body": null,
"is_bot": false,
"headline": "bump version to v0.1.5",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-10-26T00:53:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "102fdea983e5ff91d91a8b2d68d8e8355c188c12",
"body": null,
"is_bot": false,
"headline": "update readme & go mod tidy",
"author_name": "Lonny Wong",
"author_login": "lonnywong",
"committed_at": "2025-10-25T01:32:52Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 10,
"commits_last_year": 107,
"latest_release_at": "2026-07-17T22:38:26Z",
"latest_release_tag": "v0.1.9",
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 35,
"days_since_latest_release": 6,
"mean_days_between_releases": 83.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/trzsz/tsshd",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/trzsz/tsshd",
"is_deprecated": false,
"latest_version": "v0.1.9",
"repository_url": "https://github.com/trzsz/tsshd",
"versions_count": 24,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-17T22:22:21Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 21,
"stars": 502,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2024-06-24",
"count": 1
},
{
"date": "2024-07-07",
"count": 1
},
{
"date": "2024-08-27",
"count": 1
},
{
"date": "2025-10-20",
"count": 2
},
{
"date": "2026-01-23",
"count": 1
},
{
"date": "2026-01-24",
"count": 1
},
{
"date": "2026-01-26",
"count": 1
},
{
"date": "2026-02-03",
"count": 1
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-02-21",
"count": 1
},
{
"date": "2026-03-05",
"count": 1
},
{
"date": "2026-03-13",
"count": 1
},
{
"date": "2026-04-14",
"count": 1
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-20",
"count": 1
},
{
"date": "2026-05-24",
"count": 1
},
{
"date": "2026-05-31",
"count": 1
},
{
"date": "2026-07-09",
"count": 1
}
],
"complete": true,
"collected": 21,
"total_forks": 21
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"examples/go.mod",
"go.mod"
],
"largest_source_bytes": 41440,
"source_files_sampled": 39,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"examples/go.mod",
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/crypto",
"direct": true,
"version": "v0.54.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 16
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 49,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/Microsoft/go-winio",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.2"
},
{
"name": "github.com/UserExistsError/conpty",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.4"
},
{
"name": "github.com/creack/pty",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.24"
},
{
"name": "github.com/google/shlex",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20191202100458-e7afc7fbc510"
},
{
"name": "github.com/rcarmo/go-te",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "github.com/trzsz/kcp-go/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.6.72"
},
{
"name": "github.com/trzsz/quic-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.60.1"
},
{
"name": "github.com/trzsz/shellescape",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/trzsz/smux",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "golang.org/x/crypto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.54.0"
},
{
"name": "golang.org/x/net",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.57.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.47.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/creack/pty",
"direct": true,
"version": "v1.1.24",
"ecosystem": "go"
},
{
"name": "github.com/google/shlex",
"direct": true,
"version": "v0.0.0-20191202100458-e7afc7fbc510",
"ecosystem": "go"
},
{
"name": "github.com/microsoft/go-winio",
"direct": true,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/rcarmo/go-te",
"direct": true,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "github.com/trzsz/kcp-go/v5",
"direct": true,
"version": "v5.6.72",
"ecosystem": "go"
},
{
"name": "github.com/trzsz/quic-go",
"direct": true,
"version": "v0.60.1",
"ecosystem": "go"
},
{
"name": "github.com/trzsz/shellescape",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/trzsz/smux",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/userexistserror/conpty",
"direct": true,
"version": "v0.1.4",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": true,
"version": "v0.54.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": true,
"version": "v0.57.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": true,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "charm.land/bubbletea/v2",
"direct": false,
"version": "v2.0.8",
"ecosystem": "go"
},
{
"name": "charm.land/lipgloss/v2",
"direct": false,
"version": "v2.0.5",
"ecosystem": "go"
},
{
"name": "charm.land/log/v2",
"direct": false,
"version": "v2.0.0",
"ecosystem": "go"
},
{
"name": "charm.land/wish/v2",
"direct": false,
"version": "v2.0.1",
"ecosystem": "go"
},
{
"name": "github.com/anmitsu/go-shlex",
"direct": false,
"version": "v0.0.0-20200514113438-38f4b401e2be",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/colorprofile",
"direct": false,
"version": "v0.4.3",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/keygen",
"direct": false,
"version": "v0.5.4",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/ssh",
"direct": false,
"version": "v0.0.0-20250826160808-ebfa259c7309",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/ultraviolet",
"direct": false,
"version": "v0.0.0-20260713092251-4bee1914c0cf",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/ansi",
"direct": false,
"version": "v0.11.7",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/conpty",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/term",
"direct": false,
"version": "v0.2.2",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/termios",
"direct": false,
"version": "v0.1.1",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/windows",
"direct": false,
"version": "v0.2.2",
"ecosystem": "go"
},
{
"name": "github.com/clipperhouse/displaywidth",
"direct": false,
"version": "v0.11.0",
"ecosystem": "go"
},
{
"name": "github.com/clipperhouse/uax29/v2",
"direct": false,
"version": "v2.7.0",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.1",
"ecosystem": "go"
},
{
"name": "github.com/go-logfmt/logfmt",
"direct": false,
"version": "v0.6.1",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/cpuid/v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/reedsolomon",
"direct": false,
"version": "v1.14.1",
"ecosystem": "go"
},
{
"name": "github.com/kr/text",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/lucasb-eyer/go-colorful",
"direct": false,
"version": "v1.4.0",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.24",
"ecosystem": "go"
},
{
"name": "github.com/muesli/cancelreader",
"direct": false,
"version": "v0.2.2",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/rivo/uniseg",
"direct": false,
"version": "v0.4.7",
"ecosystem": "go"
},
{
"name": "github.com/tjfoc/gmsm",
"direct": false,
"version": "v1.4.1",
"ecosystem": "go"
},
{
"name": "github.com/xo/terminfo",
"direct": false,
"version": "v0.0.0-20220910002029-abceb7e1c41e",
"ecosystem": "go"
},
{
"name": "go.uber.org/mock",
"direct": false,
"version": "v0.6.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": false,
"version": "v0.0.0-20260709172345-9ea1abe57597",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.22.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.45.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/time",
"direct": false,
"version": "v0.15.0",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 49,
"direct_count": 13,
"indirect_count": 36
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 11,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 26,
"closed_unmerged_prs": 2
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "lonnywong",
"commits": 116,
"avatar_url": "https://avatars.githubusercontent.com/u/20320324?v=4"
},
{
"type": "User",
"login": "mookim-eth",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/97934198?v=4"
},
{
"type": "User",
"login": "ernie",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/14947?v=4"
},
{
"type": "User",
"login": "kitknox",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/41200331?v=4"
},
{
"type": "User",
"login": "aliceisjustplaying",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/81575558?v=4"
},
{
"type": "User",
"login": "Hentioe",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/13946976?v=4"
},
{
"type": "User",
"login": "chrisfinazzo",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1534882?v=4"
}
],
"contributors_sampled": 7,
"top_contributor_share": 0.906
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"gotest.yml",
"pre-release.yml",
"publish.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 3/30 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "bb9f1207c9a11f66ceafbe8594aa1b0a47fc599f",
"ran_at": "2026-07-24T16:29:52Z",
"aggregate_score": 4.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T22:41:39Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-05-24T06:03:12Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/trzsz/tsshd",
"host": "github.com",
"name": "tsshd",
"owner": "trzsz"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"security": 51,
"vitality": 86,
"community": 54,
"governance": 63,
"engineering": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 86,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 88,
"inputs": {
"commits_last_year": 107,
"human_commit_share": 1,
"days_since_last_push": 6,
"active_weeks_last_year": 35
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "35/52 weeks with commits",
"points": 24.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 35
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "107 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 107
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"releases_count": 10,
"latest_release_tag": "v0.1.9",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 83.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "10 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 10
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~83.9 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 83.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 6,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 6 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 6
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 54,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"forks": 21,
"stars": 502,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "502 stars",
"points": 43.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 502
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "21 forks",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 21
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 63,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 7,
"top_contributor_share": 0.906
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 91% of commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 91
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "7 contributors",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 7
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"merged_prs": 11,
"open_issues": 0,
"closed_issues": 26,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 2
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "11/13 decided PRs merged",
"points": 32.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 11,
"decided": 13
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 3/30 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"followers": 77,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "trzsz",
"public_repos": 35,
"account_age_days": 1684
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "77 followers of trzsz",
"points": 13.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 77,
"login": "trzsz"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "35 public repos, account ~4 yr old",
"points": 20.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 35
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/trzsz/tsshd"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "24 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 24
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"lrzsz",
"mosh",
"rz",
"ssh",
"ssh-server",
"sz",
"trz",
"trzsz",
"tsz",
"tssh",
"tsshd"
],
"has_wiki": true,
"homepage": "https://trzsz.github.io/tsshd",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://trzsz.github.io/tsshd",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "11 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 11
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 51,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 4.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 3/30 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 49 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 49
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 89,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 49,
"unassessed_packages": 0,
"affected_by_severity": "unknown 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: golang.org/x/crypto v0.54.0 (unknown)",
"points": 26.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "golang.org/x/crypto v0.54.0 (unknown)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 49,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 54,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.55,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "55 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 29.3,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 55,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"examples/go.mod",
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 41440,
"source_files_sampled": 39,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/39 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 39,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-24T16:30:04.693225Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/trzsz/tsshd.svg",
"full_name": "trzsz/tsshd",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.