Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-27 05:26 UTC
unxed / zip
zip library for go
unxed/zip holds a health index of 39 out of 100, placing it in the At risk band. It scores highest on Vitality (71/100) and lowest on Security (15/100). It was last updated 7 days ago. A single contributor accounts for most of its recent work.
39
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
39
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
unxedPersonal account
47 followers90 public repossince Oct 2011
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/unxed/zip | v0.1.125 | - | 112 | 7 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
71
Development activity
60Moderate
How it's scored
| 36/36 | Push recency — last push 7 days ago |
| 6.2/36 | Commit cadence — 9/52 weeks with commits |
| 18/18 | Commit volume — 178 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 178 |
| human_commit_share | 1 |
| days_since_last_push | 7 |
| active_weeks_last_year | 9 |
Release discipline
88Excellent
How it's scored
| 16.2/27 | Ships releases — 100 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 7 days ago |
| 27/27 | Release cadence — a release every ~2.3 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 100 |
| latest_release_tag | v0.1.125 |
| releases_from_tags | yes |
| days_since_latest_release | 7 |
| mean_days_between_releases | 2.3 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
26
Popularity & adoption
5Critical
How it's scored
| 4.9/60 | Stars — 3 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 3 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (BSD-3-Clause) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
38
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
59Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 12.1/25 | Owner reach — 47 followers of unxed |
| 25/25 | Track record — 90 public repos, account ~14 yr old |
Inputs used
| followers | 47 |
| owner_type | User |
| is_verified | — |
| owner_login | unxed |
| public_repos | 90 |
| account_age_days | 5,388 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 7 days ago |
| 20/20 | Version history — 112 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/unxed/zip |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 7 |
Engineering Quality
Are baseline engineering and documentation practices in place?
38
Engineering practices
30At risk
How it's scored
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
15
Security posture
15Critical
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 0/10 | Dangerous-Workflow — no data |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 0/7.5 | Vulnerabilities — 20 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 1.5 |
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
51
Agent context & guidance
11Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 10.7/40 | Legible commit history — 20 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.2 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
62Moderate
How it's scored
| 12.6/18 | One-command bootstrap — go.mod (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/56 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 36,787 |
| source_files_sampled | 56 |
| oversized_source_files | 0 |
Key facts
3GitHub stars
1contributors
178commits, last 12 months
7days since last push
100releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 1.5 / 10
1.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| n/a | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 0 | Vulnerabilities | 20 existing vulnerabilities detected |
Direct dependencies 9
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/dovydenkovas/ppmd | v0.1.1 | go.mod |
| Go | github.com/klauspost/compress | v1.18.7-0.20260521203646-ecdb779d8745 | go.mod |
| Go | github.com/unxed/par2 | v0.1.2 | go.mod |
| Go | github.com/unxed/xz | v0.1.41 | go.mod |
| Go | github.com/unxed/zipcharset | v0.1.4 | go.mod |
| Go | github.com/unxed/zlib4go | v0.1.15 | go.mod |
| Go | golang.org/x/crypto | v0.31.0 | go.mod |
| Go | golang.org/x/sync | v0.11.0 | go.mod |
| Go | golang.org/x/sys | v0.30.0 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 426,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 415548
},
"pushed_at": "2026-07-19T16:14:21Z",
"created_at": "2026-05-07T17:31:56Z",
"owner_type": "User",
"updated_at": "2026-07-19T16:14:27Z",
"description": "zip library for go",
"is_archived": false,
"is_disabled": false,
"license_spdx": "BSD-3-Clause",
"default_branch": "main",
"license_spdx_raw": "BSD-3-Clause",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "http://40in.2g0.ru/",
"name": null,
"type": "User",
"login": "unxed",
"company": null,
"location": null,
"followers": 47,
"avatar_url": "https://avatars.githubusercontent.com/u/1151423?v=4",
"created_at": "2011-10-25T18:28:37Z",
"is_verified": null,
"public_repos": 90,
"account_age_days": 5388
},
"license": {
"state": "standard",
"spdx_id": "BSD-3-Clause",
"raw_spdx": "BSD-3-Clause",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.125",
"kind": "patch",
"published_at": "2026-07-19T16:13:57Z"
},
{
"tag": "v0.1.124",
"kind": "patch",
"published_at": "2026-07-04T21:21:30Z"
},
{
"tag": "v0.1.123",
"kind": "patch",
"published_at": "2026-07-04T18:06:14Z"
},
{
"tag": "v0.1.122",
"kind": "patch",
"published_at": "2026-07-04T18:00:16Z"
},
{
"tag": "v0.1.121",
"kind": "patch",
"published_at": "2026-07-04T13:17:56Z"
},
{
"tag": "v0.1.120",
"kind": "patch",
"published_at": "2026-07-04T11:03:58Z"
},
{
"tag": "v0.1.119",
"kind": "patch",
"published_at": "2026-06-30T19:20:01Z"
},
{
"tag": "v0.1.118",
"kind": "patch",
"published_at": "2026-06-30T16:58:59Z"
},
{
"tag": "v0.1.117",
"kind": "patch",
"published_at": "2026-06-29T17:56:13Z"
},
{
"tag": "v0.1.116",
"kind": "patch",
"published_at": "2026-06-28T19:16:29Z"
},
{
"tag": "v0.1.115",
"kind": "patch",
"published_at": "2026-06-28T14:59:05Z"
},
{
"tag": "v0.1.114",
"kind": "patch",
"published_at": "2026-06-28T11:44:00Z"
},
{
"tag": "v0.1.113",
"kind": "patch",
"published_at": "2026-06-27T21:31:09Z"
},
{
"tag": "v0.1.112",
"kind": "patch",
"published_at": "2026-06-27T20:44:11Z"
},
{
"tag": "v0.1.111",
"kind": "patch",
"published_at": "2026-06-27T17:49:21Z"
},
{
"tag": "v0.1.110",
"kind": "patch",
"published_at": "2026-06-27T11:03:08Z"
},
{
"tag": "v0.1.109",
"kind": "patch",
"published_at": "2026-06-27T10:34:52Z"
},
{
"tag": "v0.1.108",
"kind": "patch",
"published_at": "2026-06-27T09:22:16Z"
},
{
"tag": "v0.1.107",
"kind": "patch",
"published_at": "2026-06-27T00:12:42Z"
},
{
"tag": "v0.1.106",
"kind": "patch",
"published_at": "2026-06-26T19:03:38Z"
},
{
"tag": "v0.1.105",
"kind": "patch",
"published_at": "2026-06-26T17:04:32Z"
},
{
"tag": "v0.1.104",
"kind": "patch",
"published_at": "2026-06-26T14:19:44Z"
},
{
"tag": "v0.1.103",
"kind": "patch",
"published_at": "2026-06-25T19:06:56Z"
},
{
"tag": "v0.1.102",
"kind": "patch",
"published_at": "2026-06-25T18:39:26Z"
},
{
"tag": "v0.1.101",
"kind": "patch",
"published_at": "2026-06-25T18:33:39Z"
},
{
"tag": "v0.1.100",
"kind": "patch",
"published_at": "2026-06-25T16:11:55Z"
},
{
"tag": "v0.1.99",
"kind": "patch",
"published_at": "2026-06-25T15:35:23Z"
},
{
"tag": "v0.1.98",
"kind": "patch",
"published_at": "2026-06-24T22:53:53Z"
},
{
"tag": "v0.1.97",
"kind": "patch",
"published_at": "2026-06-24T22:28:13Z"
},
{
"tag": "v0.1.96",
"kind": "patch",
"published_at": "2026-06-24T22:20:10Z"
},
{
"tag": "v0.1.95",
"kind": "patch",
"published_at": "2026-06-24T20:02:40Z"
},
{
"tag": "v0.1.94",
"kind": "patch",
"published_at": "2026-06-24T20:02:40Z"
},
{
"tag": "v0.1.93",
"kind": "patch",
"published_at": "2026-06-24T19:32:48Z"
},
{
"tag": "v0.1.92",
"kind": "patch",
"published_at": "2026-06-24T19:09:48Z"
},
{
"tag": "v0.1.91",
"kind": "patch",
"published_at": "2026-06-24T17:10:19Z"
},
{
"tag": "v0.1.90",
"kind": "patch",
"published_at": "2026-06-24T14:45:27Z"
},
{
"tag": "v0.1.89",
"kind": "patch",
"published_at": "2026-06-24T14:24:02Z"
},
{
"tag": "v0.1.88",
"kind": "patch",
"published_at": "2026-06-24T14:16:02Z"
},
{
"tag": "v0.1.87",
"kind": "patch",
"published_at": "2026-06-24T14:00:38Z"
},
{
"tag": "v0.1.86",
"kind": "patch",
"published_at": "2026-06-22T22:00:57Z"
},
{
"tag": "v0.1.85",
"kind": "patch",
"published_at": "2026-06-21T21:33:05Z"
},
{
"tag": "v0.1.84",
"kind": "patch",
"published_at": "2026-06-21T10:53:20Z"
},
{
"tag": "v0.1.83",
"kind": "patch",
"published_at": "2026-06-21T09:17:05Z"
},
{
"tag": "v0.1.82",
"kind": "patch",
"published_at": "2026-06-21T08:53:37Z"
},
{
"tag": "v0.1.81",
"kind": "patch",
"published_at": "2026-06-21T07:24:02Z"
},
{
"tag": "v0.1.80",
"kind": "patch",
"published_at": "2026-06-20T20:39:03Z"
},
{
"tag": "v0.1.79",
"kind": "patch",
"published_at": "2026-06-20T20:07:35Z"
},
{
"tag": "v0.1.78",
"kind": "patch",
"published_at": "2026-06-20T13:12:28Z"
},
{
"tag": "v0.1.77",
"kind": "patch",
"published_at": "2026-06-20T13:07:49Z"
},
{
"tag": "v0.1.76",
"kind": "patch",
"published_at": "2026-06-18T20:21:34Z"
},
{
"tag": "v0.1.75",
"kind": "patch",
"published_at": "2026-06-18T20:21:34Z"
},
{
"tag": "v0.1.74",
"kind": "patch",
"published_at": "2026-06-18T15:56:27Z"
},
{
"tag": "v0.1.73",
"kind": "patch",
"published_at": "2026-06-18T10:17:55Z"
},
{
"tag": "v0.1.72",
"kind": "patch",
"published_at": "2026-06-18T10:07:51Z"
},
{
"tag": "v0.1.70",
"kind": "patch",
"published_at": "2026-06-18T09:51:57Z"
},
{
"tag": "v0.1.69",
"kind": "patch",
"published_at": "2026-06-18T09:31:46Z"
},
{
"tag": "v0.1.68",
"kind": "patch",
"published_at": "2026-06-18T09:31:46Z"
},
{
"tag": "v0.1.67",
"kind": "patch",
"published_at": "2026-06-18T09:31:29Z"
},
{
"tag": "v0.1.66",
"kind": "patch",
"published_at": "2026-06-18T09:20:49Z"
},
{
"tag": "v0.1.65",
"kind": "patch",
"published_at": "2026-06-18T09:13:47Z"
},
{
"tag": "v0.1.64",
"kind": "patch",
"published_at": "2026-06-18T08:45:14Z"
},
{
"tag": "v0.1.63",
"kind": "patch",
"published_at": "2026-06-18T08:29:58Z"
},
{
"tag": "v0.1.61",
"kind": "patch",
"published_at": "2026-06-18T08:15:50Z"
},
{
"tag": "v0.1.60",
"kind": "patch",
"published_at": "2026-06-18T08:05:19Z"
},
{
"tag": "v0.1.59",
"kind": "patch",
"published_at": "2026-06-18T08:01:46Z"
},
{
"tag": "v0.1.58",
"kind": "patch",
"published_at": "2026-06-18T07:38:41Z"
},
{
"tag": "v0.1.57",
"kind": "patch",
"published_at": "2026-06-18T07:13:44Z"
},
{
"tag": "v0.1.56",
"kind": "patch",
"published_at": "2026-06-18T07:09:50Z"
},
{
"tag": "v0.1.55",
"kind": "patch",
"published_at": "2026-06-17T13:55:12Z"
},
{
"tag": "v0.1.54",
"kind": "patch",
"published_at": "2026-06-16T20:04:03Z"
},
{
"tag": "v0.1.53",
"kind": "patch",
"published_at": "2026-06-14T18:54:40Z"
},
{
"tag": "v0.1.52",
"kind": "patch",
"published_at": "2026-06-14T18:47:48Z"
},
{
"tag": "v0.1.51",
"kind": "patch",
"published_at": "2026-06-14T15:48:17Z"
},
{
"tag": "v0.1.50",
"kind": "patch",
"published_at": "2026-06-14T14:46:20Z"
},
{
"tag": "v0.1.49",
"kind": "patch",
"published_at": "2026-06-13T19:48:38Z"
},
{
"tag": "v0.1.36",
"kind": "patch",
"published_at": "2026-06-13T16:26:06Z"
},
{
"tag": "v0.1.35",
"kind": "patch",
"published_at": "2026-06-13T15:10:04Z"
},
{
"tag": "v0.1.34",
"kind": "patch",
"published_at": "2026-06-13T15:06:38Z"
},
{
"tag": "v0.1.33",
"kind": "patch",
"published_at": "2026-06-13T14:55:02Z"
},
{
"tag": "v0.1.32",
"kind": "patch",
"published_at": "2026-06-13T13:40:11Z"
},
{
"tag": "v0.1.31",
"kind": "patch",
"published_at": "2026-06-13T13:31:43Z"
},
{
"tag": "v0.1.30",
"kind": "patch",
"published_at": "2026-06-13T13:23:13Z"
},
{
"tag": "v0.1.29",
"kind": "patch",
"published_at": "2026-06-13T13:20:47Z"
},
{
"tag": "v0.1.28",
"kind": "patch",
"published_at": "2026-06-13T12:21:46Z"
},
{
"tag": "v0.1.27",
"kind": "patch",
"published_at": "2026-06-08T19:51:11Z"
},
{
"tag": "v0.1.26",
"kind": "patch",
"published_at": "2026-06-08T18:57:17Z"
},
{
"tag": "v0.1.25",
"kind": "patch",
"published_at": "2026-06-08T17:49:37Z"
},
{
"tag": "v0.1.24",
"kind": "patch",
"published_at": "2026-06-05T15:14:39Z"
},
{
"tag": "v0.1.23",
"kind": "patch",
"published_at": "2026-06-02T19:03:20Z"
},
{
"tag": "v0.1.22",
"kind": "patch",
"published_at": "2026-06-01T20:49:03Z"
},
{
"tag": "v0.1.21",
"kind": "patch",
"published_at": "2026-05-31T18:05:55Z"
},
{
"tag": "v0.1.20",
"kind": "patch",
"published_at": "2026-05-31T12:14:20Z"
},
{
"tag": "v0.1.19",
"kind": "patch",
"published_at": "2026-05-31T02:08:03Z"
},
{
"tag": "v0.1.18",
"kind": "patch",
"published_at": "2026-05-31T01:53:29Z"
},
{
"tag": "v0.1.17",
"kind": "patch",
"published_at": "2026-05-30T23:44:02Z"
},
{
"tag": "v0.1.16",
"kind": "patch",
"published_at": "2026-05-30T20:24:04Z"
},
{
"tag": "v0.1.15",
"kind": "patch",
"published_at": "2026-05-30T17:09:14Z"
},
{
"tag": "v0.1.14",
"kind": "patch",
"published_at": "2026-05-30T14:30:35Z"
},
{
"tag": "v0.1.13",
"kind": "patch",
"published_at": "2026-05-30T13:51:57Z"
},
{
"tag": "v0.1.12",
"kind": "patch",
"published_at": "2026-05-30T13:14:27Z"
}
],
"recent_commits": [
{
"oid": "ad511dd7bcd21e355464c667980239d0f215ec14",
"body": "Ensure that file data processed via the parallel compression pipeline\n(`compressFile`) is encrypted with WinZip AES when a password is provided.\n\nPreviously, concurrently archived files were written to the temporary\nfile pool as plaintext. However, the headers were still injected with\nthe AES extra \n[…]\nordance\n with the AE-2 standard.\n\nAdditionally, add `TestArchiver_ParallelEncryption` to cover concurrent\narchiving and extraction of encrypted files.\n\nTouch https://github.com/unxed/zipper/issues/12",
"is_bot": false,
"headline": "fix(zip): encrypt file data during parallel compression",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-07-19T16:13:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c6a02d212fd4731c8d4572dd75b21f84732e7f4",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-07-04T21:21:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a36fa66c568b0d5210b4aef372c4f8417fd85f9a",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-07-04T18:06:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b9219a5483cf986574b96167b3c590f3c678abb",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-07-04T18:00:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79cf2741b45c17d32ce439e4d8669a1cc2cfcbca",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-07-04T13:17:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c559ac1e5cf847244218fdc68807b8b0a59c0e01",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-07-04T11:03:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d54fa10fd989e25f02cc5300a58c92beb4f8b17",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-30T19:20:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87bddf26a983726beab73817fd6a4536cbf23b57",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-30T16:58:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a860d5c87583d4a9ef4d3435a34fa8bb6f7b391",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-29T17:56:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dea6119316615398656b4eb25f6bebe1f349ae66",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-28T19:16:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38e83c7554d734dc1cf5e28317d45735905fe10a",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-28T14:59:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c321598b3935139d14b7f838aa164762b0a37dbd",
"body": "- Replace the hardcoded default Deflate compression level '5' with\n 'flate.DefaultCompression' (-1) in register.go.\n- Support dynamic Deflate compression level propagation in\n Updater.AppendHeader by respecting fh.Level, preventing compression\n level loss during in-place archive updates.",
"is_bot": false,
"headline": "perf(zip): fix default compression level and respect fh.Level in Updater",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-28T11:44:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14521f8a2cd785c8aa3e20d562bdd68237ba02ed",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-27T21:31:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fbabdc43cef22590399dbc47f86d3980f481c97",
"body": "- Refine `analyzeBlock` to prevent using Huffman-only mode on highly redundant data (like zeros) where LZ77 is significantly more efficient.\n- Lower the heuristic threshold from 1MB to 4096 bytes to ensure small text files are compressed efficiently, fixing the 104% ratio anomaly at BestSpeed.\n- Ens\n[…]\ning in progress stats by removing double-counting and correctly handling rollbacks during fallback to the Store method.\n- Add comprehensive tests for compression heuristics and TorrentZip consistency.",
"is_bot": false,
"headline": "`archiver: fix compression ratio anomalies and refine heuristics`",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-27T20:44:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d54f0c1031717a7c2a6b7f70adc8bd8e78874c4b",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-27T17:49:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "928946f785cb0970f3441d98fc09635aec18d045",
"body": "- Introduce an on-the-fly entropy-based compression router in archiver.go.\n Pre-scans the first 64 KB of a file (if size >= 1 MB) to count unique bytes:\n - Bypasses compression (sets Method to Store) if data has extremely high\n entropy (e.g. encrypted or pre-compressed data).\n - Routes t\n[…]\nand group lookups\n in sys_unix.go to reduce GC pressure on extraction.\n- Skip file preallocation in fs_linux.go and fs_windows.go for files smaller\n than or equal to 1 MB to reduce syscall overhead.",
"is_bot": false,
"headline": "feat: implement dynamic entropy-based compression and optimize extractor",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-27T11:03:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c18aae462d49b93c346c007085dff59930ac60c",
"body": "…rOffset\n\n- Increase copyBufPool buffer size to 1MB to leverage SIMD PCLMULQDQ\n fast-paths during CRC32 calculations.\n- Introduce a 4KB overhead tolerance in fallback logic to prevent\n aggressive reverting to Store mode on files with minor compression\n overhead (such as ZSTD/GZIP frame headers).\n- Export HeaderOffset on File to expose the local file header position\n for external seek/index parsers.",
"is_bot": false,
"headline": "archiver: optimize copy buffer size, fallback logic, and export Heade…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-27T10:34:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a839d5760911b995bf1cda6613890b529de67fe1",
"body": "- Refactored the channel-based `copyBufCh` and `sparseBufCh` into `sync.Pool` to improve buffer reuse and reduce GC pressure.\n- Replaced `io.CopyBuffer` calls with direct read/write loops in `compressFile`, `compressFileSimple`, and `createFile` to avoid interface boxing and runtime overhead.\n- Removed the `ctxCountHashWriter` struct entirely, eliminating heap escapes and redundant allocations during archival and extraction.",
"is_bot": false,
"headline": "perf(zip): optimize buffer allocation and eliminate writer boxing",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-27T09:22:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edea9edf9dcf047b7a13da44144876596db70a8d",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-27T00:12:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7eeef981a9581ca5e2d75a86167247ad52df21c",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-26T19:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7753050fe4bfe37907c377c47f7b2fce189ebefb",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-26T17:04:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24cc7fd0be0f7e519789bc531d13f414b70ea097",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-26T14:19:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2363f316b8861970b9037d3a4f465c2bceb12205",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-25T19:06:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9aba6729668881c9924391a9a813769c3d453bee",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-25T18:45:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cc11568bd27f8e94cd190e9c40cac6d94dababf",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-25T18:39:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5652bc5f87eb3265dda15858f709ce6da78253a8",
"body": null,
"is_bot": false,
"headline": "Dir cache, better zip bomb limit",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-25T18:33:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd47d877c1b528470fa88eae229bbe75696485d7",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-25T16:11:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "714524ecd2e40b1b15fc9f5b94df9c0323b9f47e",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-25T15:35:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eca2c6a737541d93d1843a5bbb045b2c43616a97",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T22:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec75d1e43a457b7ae828a2a9699d8442c6a3d142",
"body": null,
"is_bot": false,
"headline": "Undo faulty optimization",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T22:28:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5550845379de48acdf1ab024daf1dec3e9f43e6d",
"body": null,
"is_bot": false,
"headline": "Quick dict reset",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T22:20:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "966f1172f9228c35d6bc7376f493bdd0f9f5a8ad",
"body": "…ze path caching.\n\nThis change replaces the previous spawn-and-throttle concurrency model in the zip archiver with a highly efficient fixed-size worker pool running on a task channel of anonymous closures. This eliminates the overhead of launching ten thousand individual goroutines, significantly re\n[…]\nand GC pressure. Additionally, it caches the current working directory and implements a fast-path prefix match to bypass expensive filepath.Abs and filepath.Rel system calls during the archiving loop.",
"is_bot": false,
"headline": "Refactor parallel zip archiving to use a fixed worker pool and optimi…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T20:02:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "89daef2684c692f5a50160d0db0ef240d9bf7699",
"body": "…iver and extractor.\n\nThis update replaces the unstable sync.Pool-based buffer pools with robust, channel-based free lists to prevent the Go garbage collector from aggressively trashing large memory buffers under heavy load. It removes redundant double-buffering via bufio.Reader in the file compress\n[…]\ncing io.MultiWriter with a dedicated, lightweight hashing writer. These changes significantly lower memory allocations per operation and increase total throughput during large-scale compression tasks.",
"is_bot": false,
"headline": "Optimize memory allocation and eliminate double-buffering in the arch…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T19:48:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "233696f9607df2259887f1de0d2708bd6eebca37",
"body": "…ing archival.\n\nThis update implements a thread-safe caching layer for UID and GID resolution within the Unix-specific file system logic. By storing previously looked-up usernames and group names in memory, the archiver avoids thousands of redundant and slow system calls during the processing of arc\n[…]\nfically targets performance bottlenecks observed during heavy parallel workloads, ensuring that the metadata injection process remains efficient without compromising system resources or thread safety.",
"is_bot": false,
"headline": "Reduce system call overhead by caching user and group information dur…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T19:32:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4bc838f1672e270c7e94af4e880fd9fd59a4a659",
"body": null,
"is_bot": false,
"headline": "Update unxed/xz",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T19:09:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "228150b799f12faad9273aa8310ba768342e472e",
"body": "This change replaces the previous goroutine-per-file paradigm during ZIP archive extraction with a highly efficient, fixed-size Worker Pool. Previously, extracting archives with thousands of small files generated significant scheduler latency and stack allocation overhead as thousands of transient g\n[…]\n off a shared task channel. This prevents goroutine thrashing, eliminates redundant context switching, and significantly improves extraction speeds on file sets containing high density of small files.",
"is_bot": false,
"headline": "Optimize ZIP extraction latency by introducing a fixed Worker Pool.",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T17:10:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c95d54d70bebcc6fb203b6ecb2ecd1314085b527",
"body": "…orrectly restarting frames instead of calling Flush().",
"is_bot": false,
"headline": "Fixing the architectural error in SeekIndex creation for ZSTD/XZ by c…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T14:45:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2da689dc52f8f77b064a099f53be137c0a8ba1cc",
"body": "…andard archives.",
"is_bot": false,
"headline": "Increased the ZSTD decoder window limit to 128 MB to support large st…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T14:24:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f782c9c196256751d49d6c466957e4f048009767",
"body": "… limit in the ZSTD decoder.",
"is_bot": false,
"headline": "Fixing the 'window size exceeded' error by removing the forced memory…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T14:16:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2cb2395f10acd2cd6a30f8062f0429a4725711c6",
"body": "…sor pooling and parallelizing small file compression.\n\nThis change addresses memory and CPU bottlenecks during multi-file zip archiving operations. Previously, specifying custom compression levels bypassed the compressor pool, resulting in significant garbage collection overhead from repeated alloc\n[…]\n small files. Removing this restriction allows small files to be processed concurrently through the file pool, increasing CPU utilization and reducing execution times on heavily populated directories.",
"is_bot": false,
"headline": "Optimize zip archiving performance by introducing level-aware compres…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-24T14:00:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9d3f2647d632bf760d8ac1e2e3c52a9d3fba4758",
"body": null,
"is_bot": false,
"headline": "Update deps",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-22T22:00:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88776e333224ad7d3146a01388da7a0dd6112d04",
"body": "…ves smaller than 4MB unless running in test mode.",
"is_bot": false,
"headline": "Disable random-access seek index generation for files and solid archi…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-21T21:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a41c795315e23be4bb8591b9864bb99b97d9cedf",
"body": null,
"is_bot": false,
"headline": "Update zlib4go",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-21T10:53:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e64c8eacf3045fa4db94b8683a871d710b83e52",
"body": null,
"is_bot": false,
"headline": "Update zlib4go",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-21T09:17:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9d4351c6dbfa71aa747a61e7f1e78f697216efb",
"body": null,
"is_bot": false,
"headline": "Updated zlib4go",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-21T08:53:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6e55a7ba3e0fc900cdff89561f8eaacb6dc0d0c",
"body": "Touch https://github.com/unxed/zipper/issues/7",
"is_bot": false,
"headline": "Fix solid archives compression progress.",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-21T07:24:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b75f4407c4118653289ad4540f1eff7c97f6df2",
"body": null,
"is_bot": false,
"headline": "More tests",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-20T20:45:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ede3392f03589dccc5e705cb95f7319ceaea257",
"body": null,
"is_bot": false,
"headline": "gofmt",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-20T20:39:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "932c4631d828e4a465614d42f3bd0d389b38045b",
"body": null,
"is_bot": false,
"headline": "Fix slashes in torrentzip mode",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-20T20:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7c763ae49ded3d025f25fd9c0bf10b12f2d235b",
"body": "…plementation using zlib4go.\n\nThe project now leverages the original C zlib logic transpiled via wasm2go, eliminating the discrepancies in compressed output caused by the native Go flate implementation. A new tzStripZlibWriter filter ensures raw deflate compatibility by stripping zlib headers and Ad\n[…]\ntzip formatting requirements including specific flags and compression methods, resulting in bit-perfect archive generation without any CGO dependencies.\n\nTouch https://github.com/unxed/zipper/issues/3",
"is_bot": false,
"headline": "Achieve 100% bit-exact compatibility with the reference torrentzip im…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-20T20:07:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7755be6af03496b12d3fbcc82e113ce7e5c2a8a4",
"body": null,
"is_bot": false,
"headline": "torrentzip spec",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-20T13:14:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fafaa9233230aa60280b14ee1f6f00de0e4d3164",
"body": null,
"is_bot": false,
"headline": "gofmt",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-20T13:12:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "515632464018656479264a89e151ef7de4b2f139",
"body": "…act compatible with the official C-based reference tool.\n\nThis change refactors the torrentzip formatting logic to perfectly mimic the output structure and compressed bitstream of the standard trrntzip converter. Specifically, we now compress directory entries using standard Store mode with zero si\n[…]\nated integration test has been added to compare our generated outputs byte-for-byte with the official compiled trrntzip binary found in the system PATH.\n\nTouch https://github.com/unxed/zipper/issues/3",
"is_bot": false,
"headline": "Fix and align the pure Go torrentzip implementation to be 100% bit-ex…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-20T13:07:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "620b18e4a8fbd2f07d484809a48068a36b05c040",
"body": null,
"is_bot": false,
"headline": "Fix test",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-18T20:21:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80030de32f4f736dd1dc5b6109a794863eeb986a",
"body": null,
"is_bot": false,
"headline": "Optimize directory traversal",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-18T15:56:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b128a42c636a684e425d2518fd1a9d6871ffef33",
"body": null,
"is_bot": false,
"headline": "Fast path for files < 32 Kb",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-18T10:17:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d6868b9321d595861ee706da4a072b99607879d",
"body": null,
"is_bot": false,
"headline": "Output cleanup",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-18T10:07:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "299115065a39ca967c9254ad8182548c5ee3921a",
"body": null,
"is_bot": false,
"headline": "Thread safe crypto",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-18T09:51:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3c26ed54c9510ebe28d8ac26631f78c278a3ed1",
"body": "Performance optimizations",
"is_bot": false,
"headline": "Larger buffers",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-18T09:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "add75326c94067857300c4953364f2c052e9ebdc",
"body": null,
"is_bot": false,
"headline": "Added WithArchiverPathMapping",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-18T07:09:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a637882d3111bfcdda0bf6ae8cbe400087579a14",
"body": "… force maximum compression level for torrentzip mode.",
"is_bot": false,
"headline": "Fix directory resolution leak on Windows multi-drive environments and…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-17T13:55:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "764c50896febc38d94ed5e64509a74972c1a5fe2",
"body": "… fix torrentzip sequential CRC32 calculation.\n\nThis change allows archiving files located outside of the designated chroot directory by converting absolute or parent-relative paths into secure, flat relative structures within the zip file. Additionally, to ensure compliant torrentzip generation, a \n[…]\npreserve the strict alphabetical ordering of files and directories required by the torrentzip specification, a synchronous processing branch is used for single-threaded executions utilizing this pool.",
"is_bot": false,
"headline": "Support archiving files outside of chroot with safe normalization and…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-16T20:04:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f66253c0b390c6ee895e4dcf44ee14e51eb0fe09",
"body": "…to UncompressedSize.",
"is_bot": false,
"headline": "Add limitReadCloser to zip/reader.go to restrict decompression reads …",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-14T18:54:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10d0c42ad21f3f5cea91d7d06268889454a067b6",
"body": "…ectory.",
"is_bot": false,
"headline": "Fix incorrect path traversal protection logic when chroot is root dir…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-14T18:47:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3af4637e8acba87e15fbcaaaefce022c52013ef9",
"body": null,
"is_bot": false,
"headline": "STDIN/OUT support",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-14T15:48:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a76fc819f3a733ef5ad406da62933821ae31ba56",
"body": null,
"is_bot": false,
"headline": "Make f4 exts spec vendor neutral",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-14T14:46:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff55ba7e32d88c2cdb94387198009c64bab035c5",
"body": null,
"is_bot": false,
"headline": "LZMA writing support",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T19:48:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3550a410ab9368fefd88639cc2de7bdc04cce3a",
"body": null,
"is_bot": false,
"headline": "More tests",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T18:51:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64a2ea1034a3e1de4ee4572e8226c6a2826609f1",
"body": null,
"is_bot": false,
"headline": "More tests",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T18:43:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38d53dbfccbf43bb1e07b5ad3e6de0dfecf67d45",
"body": null,
"is_bot": false,
"headline": "Allow setting compression level",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T16:26:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6f7026d01ae1551d8e81291ad78bd7274da805e",
"body": null,
"is_bot": false,
"headline": "Minor",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T15:10:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbccccda85ff3d0acb924bf12393a2d5309ec285",
"body": null,
"is_bot": false,
"headline": "Minor",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T15:06:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee9ae67ae6aef4af815bfd23fb91081779ff78d6",
"body": "Minor fixes",
"is_bot": false,
"headline": "More tests",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T14:55:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d06e2d7ba3838b4beb234f69a3092a4b63d9a53",
"body": "…clean up redundant parsing code in the extractor.\n\nThis update introduces a critical safeguard to the zip updater to prevent the accidental corruption of F4Crypt encapsulated archives. The NewUpdater function now reads the final bytes of the file, returning an error if the F4IDX magic footer is det\n[…]\n, redundant manual parsing of the 0x000d extra field has been removed from the extractor's special file handling block, as these attributes are already centrally resolved during reader initialization.",
"is_bot": false,
"headline": "Implement an F4Crypt archive protection check in the zip updater and …",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T13:40:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c06d9a28b9f2123dbd3d3428f06ec248ad16a97d",
"body": null,
"is_bot": false,
"headline": "Fix encryption",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T13:31:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c1163256e457f155ed9c1e97a3f684314a66584",
"body": null,
"is_bot": false,
"headline": "SetComment added",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T13:23:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67b2b7814883887519be184c78e2a8da95aad537",
"body": "…ault-tolerant parent directory synthesis, and Windows-compatible symlinks in unxed/zip.\n\nThis update introduces a variety of robust features to the unxed/zip library, bringing it to functional parity with unxed/tar. An F4Crypt container has been implemented using AES-256-CTR and PBKDF2-HMAC-SHA256,\n[…]\n method that resolves path conflicts, and Windows symlink extraction has been updated to automatically fall back to directory junctions or local file copies when administrative privileges are missing.",
"is_bot": false,
"headline": "Implement F4Crypt encapsulation, archive locking, Unicode comments, f…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T13:20:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8873a02b1f11e261a7b50a6468ae6f143d543826",
"body": null,
"is_bot": false,
"headline": "Update unxed/par2",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T12:21:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c343a76ab19b9b54ff3860de30510b12de4d668",
"body": "…rdlinks and device nodes.\n\nThis update aligns the f4 ZIP Extensions specification with the existing capabilities of the codebase. Specifically, it adds detailed layout and methodological definitions for Windows Security Descriptors (NTFS ACLs) under extra field 0x4453, and POSIX hardlinks and speci\n[…]\nlly implemented and tested in the library, ensuring that the specification accurately reflects the format's support for preserving high-fidelity filesystem metadata across different operating systems.",
"is_bot": false,
"headline": "Update f4 ZIP specification to document Windows NTFS ACLs and UNIX ha…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-13T11:36:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1181dd927c4ff1373b63ca5b02c6d57f2ce6a9ec",
"body": null,
"is_bot": false,
"headline": "More tests",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-08T19:58:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25632f0c4282fe528b6079a4d56b9981d6dec91e",
"body": null,
"is_bot": false,
"headline": "Multi volume support",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-08T19:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3673886f64aa9a22b205bba4ec481d31f6d176a2",
"body": null,
"is_bot": false,
"headline": "Recovery information support",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-08T18:57:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23bf0f1de4436b6a669f08351d3570994fc99ff0",
"body": null,
"is_bot": false,
"headline": "torrentzip support",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-08T17:49:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9886c1fd8919fff125e9b28c2225b9da484b74a",
"body": null,
"is_bot": false,
"headline": "Random access for encrypted zips",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-05T15:14:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a6ed10d0c998937a55dfafc670c326ace568b5b",
"body": null,
"is_bot": false,
"headline": "Minor",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-02T22:48:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6e54a57b0494504f8bd17478235df79eda7e51e",
"body": null,
"is_bot": false,
"headline": "Wrong placement",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-02T22:44:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e64a7db47a5cc6efc51c49fb3b8589419cac9859",
"body": null,
"is_bot": false,
"headline": "readme",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-02T22:43:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a80ab5128e16763454cabc0e4b05ed4594f545a4",
"body": null,
"is_bot": false,
"headline": "readme",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-02T22:41:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9175a6a681aa045302cfed6682f4ddccc3428c85",
"body": null,
"is_bot": false,
"headline": "Minor",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-02T19:03:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3574e6d467b4e92112c6d5c67065a20c6b04165b",
"body": null,
"is_bot": false,
"headline": "Minor",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-02T16:08:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f545b20b363333cb73739c5ea04182c0a9b77171",
"body": null,
"is_bot": false,
"headline": "Cleanup",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-02T16:07:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e99b007432652761a9a6560ea8069c8fc373ec80",
"body": "…using hidden sidecar files.\n\nThis update introduces support for seek-optimized random-access inside compressed ZIP archives by utilizing hidden files positioned immediately after the compressed file payload. This design aligns with the SOZip specification and prevents issues associated with the 64K\n[…]\nhandle corrupted or truncated index data, and tests have been added to verify correctness under both indexing modes.\n\nSee also: https://github.com/mxmlnkn/ratarmount/issues/192#issuecomment-4600485482",
"is_bot": false,
"headline": "Implement standard SOZip and GZIDX seek index generation and parsing …",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-02T16:03:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3ece0ade2a0cd476370b05bced2e21d84e31b55b",
"body": null,
"is_bot": false,
"headline": "Better new field draft",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-01T21:54:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5f5c505d57d567b2e877c8aacab31de563946a6",
"body": "https://github.com/unxed/zipper",
"is_bot": false,
"headline": "Misc additions for zipper",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-01T20:49:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f789167dbe2ab7f4351d8ea21a3c0769e66e1202",
"body": null,
"is_bot": false,
"headline": "Bump version to 0.3",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-01T19:59:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e102ec273e574c66060dab1ec2eda53e14c08f14",
"body": null,
"is_bot": false,
"headline": "Added 0x7813 ratarmount FlatBuffers index f4exts proposal.",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-06-01T19:59:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3f6cc9da99dee3fcd78994ae0ffca426d0b6946",
"body": "This commit introduces a native, cross-platform Deflate64 encoder featuring an optimized hash-chain match finder and a shortest-path optimal parser inspired by 7-Zip's design. It implements bit-level writers, dynamic Huffman tree generation with depth-limit corrections, and RLE tree length compressi\n[…]\nation loops, CPU-native bit manipulation, and the 'niceMatch' greedy heuristic, have been incorporated to guarantee robust and fast execution without memory overhead on various hardware architectures.",
"is_bot": false,
"headline": "Add high-performance Deflate64 compression and optimal parsing.",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-05-31T18:05:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32cbdd72cd0b530aa47cb0f29711070d5f8912df",
"body": null,
"is_bot": false,
"headline": "Removed obsolete test",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-05-31T12:14:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5f36b8bcc80a746e15ef87abf4e2ee495930fa1",
"body": null,
"is_bot": false,
"headline": "More tests",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-05-31T12:13:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3ed186b9527096281ebbb2de45cf9b3de1042ad",
"body": "…mory efficiency.\n\nThis update refines salvage mode by parsing ZIP64 extra fields and introduces uppercase volume extension support to resolve case-sensitivity issues on Unix systems. Performance is improved by pre-allocating static Deflate64 Huffman trees and converting context-monitoring writers t\n[…]\nty by enabling robust data descriptor detection during sequential stream extraction and ensuring that fallback copy operations immediately respect context cancellation through a custom reader wrapper.",
"is_bot": false,
"headline": "Improve archive processing robustness, platform compatibility, and me…",
"author_name": "Ivan Sorokin",
"author_login": "unxed",
"committed_at": "2026-05-31T12:10:41Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 178,
"latest_release_at": "2026-07-19T16:13:57Z",
"latest_release_tag": "v0.1.125",
"releases_from_tags": true,
"days_since_last_push": 7,
"active_weeks_last_year": 9,
"days_since_latest_release": 7,
"mean_days_between_releases": 2.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/unxed/zip",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/unxed/zip",
"is_deprecated": false,
"latest_version": "v0.1.125",
"repository_url": "https://github.com/unxed/zip",
"versions_count": 112,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-19T16:13:57Z",
"latest_version_yanked": null,
"days_since_latest_publish": 7
}
]
},
"popularity": {
"forks": 0,
"stars": 3,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 36787,
"source_files_sampled": 56,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/dovydenkovas/ppmd",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.1"
},
{
"name": "github.com/klauspost/compress",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.18.7-0.20260521203646-ecdb779d8745"
},
{
"name": "github.com/unxed/par2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.2"
},
{
"name": "github.com/unxed/xz",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.41"
},
{
"name": "github.com/unxed/zipcharset",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.4"
},
{
"name": "github.com/unxed/zlib4go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.15"
},
{
"name": "golang.org/x/crypto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.31.0"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.11.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.30.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "unxed",
"commits": 178,
"avatar_url": "https://avatars.githubusercontent.com/u/1151423?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "20 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ad511dd7bcd21e355464c667980239d0f215ec14",
"ran_at": "2026-07-27T05:26:15Z",
"aggregate_score": 1.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/unxed/zip",
"host": "github.com",
"name": "zip",
"owner": "unxed"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"security": 15,
"vitality": 71,
"community": 26,
"governance": 38,
"engineering": 38
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 71,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"commits_last_year": 178,
"human_commit_share": 1,
"days_since_last_push": 7,
"active_weeks_last_year": 9
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "9/52 weeks with commits",
"points": 6.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 9
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "178 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 178
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.1.125",
"releases_from_tags": true,
"days_since_latest_release": 7,
"mean_days_between_releases": 2.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 26,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 5,
"inputs": {
"forks": 0,
"stars": 3,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (BSD-3-Clause)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "BSD-3-Clause"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 38,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"followers": 47,
"owner_type": "User",
"is_verified": null,
"owner_login": "unxed",
"public_repos": 90,
"account_age_days": 5388
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "47 followers of unxed",
"points": 12.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 47,
"login": "unxed"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "90 public repos, account ~14 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 90
}
},
{
"code": "account_age_years",
"params": {
"years": 14
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/unxed/zip"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 7
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 7 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 7
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "112 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 112
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 38,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 30,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 15,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 15,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 1.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "20 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 51,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 11,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "20 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 20,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 36787,
"source_files_sampled": 56,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/56 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 56,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T05:26:19.923867Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/u/unxed/zip.svg",
"full_name": "unxed/zip",
"license_state": "standard",
"license_spdx": "BSD-3-Clause"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.