Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-30 01:04 UTC
vibrantgio / mvu
Model-View-Update runtime for Gio with an rx-based reactive core and the MessageOp widget protocol
vibrantgio/mvu holds a health index of 40 out of 100, placing it in the At risk band. It scores highest on Vitality (70/100) and lowest on Community & Adoption (24/100). It was last updated 1 day ago. A single contributor accounts for most of its recent work.
40
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
40
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Vibrant GioOrganization
0 followers21 public repossince May 2025
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| Go | github.com/vibrantgio/mvu | v0.4.1 | - | 23 | 1 day ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
70
Development activity
63Moderate
How it's scored
| 36/36 | Push recency — last push 1 days ago |
| 4.8/36 | Commit cadence — 7/52 weeks with commits |
| 11.9/18 | Commit volume — 20 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 20 |
| human_commit_share | 1 |
| days_since_last_push | 1 |
| active_weeks_last_year | 7 |
Release discipline
80Good
How it's scored
| 16.2/27 | Ships releases — 23 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 1 days ago |
| 19.8/27 | Release cadence — a release every ~59 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 23 |
| latest_release_tag | v0.4.1 |
| releases_from_tags | yes |
| days_since_latest_release | 1 |
| mean_days_between_releases | 59 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
24
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 1 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
36
Maintainer resilience (bus factor)
16Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 6/10 | OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
42At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 0/25 | Owner reach — 0 followers of vibrantgio |
| 12.1/25 | Track record — 21 public repos, account ~1 yr old |
Inputs used
| followers | 0 |
| owner_type | Organization |
| is_verified | — |
| owner_login | vibrantgio |
| public_repos | 21 |
| account_age_days | 432 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on go |
| 35/35 | Publish recency — latest publish 1 days ago |
| 20/20 | Version history — 23 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/vibrantgio/mvu |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 1 |
Engineering Quality
Are baseline engineering and documentation practices in place?
38
Engineering practices
30At risk
How it's scored
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
28
Security posture
28Critical
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 0/10 | Dangerous-Workflow — no data |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 0/7.5 | Vulnerabilities — 18 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 2.8 |
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
54
Agent context & guidance
13Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 12.7/40 | Legible commit history — 14 of 59 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.237 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 12.6/18 | One-command bootstrap — example/go.mod, go.mod (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — Go (statically typed) |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 15 of the last 59 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.254 |
| toolchain_manifests | example/go.mod, go.mod |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Go (statically typed) |
| 55/55 | Manageable file sizes — 0/21 source files over 60KB |
Inputs used
| primary_language | Go |
| largest_source_bytes | 4,933 |
| source_files_sampled | 21 |
| oversized_source_files | 0 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — example |
Inputs used
| example_dirs | example |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
0GitHub stars
1contributors
20commits, last 12 months
1days since last push
23releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 2.8 / 10
2.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| n/a | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 0 | Vulnerabilities | 18 existing vulnerabilities detected |
Direct dependencies 2
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | gioui.org | v0.10.0 | go.mod |
| Go | github.com/reactivego/rx | v0.3.0 | go.mod |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 193,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 33456
},
"pushed_at": "2026-07-28T12:41:29Z",
"created_at": "2021-08-18T12:22:10Z",
"owner_type": "Organization",
"updated_at": "2026-07-28T12:44:53Z",
"description": "Model-View-Update runtime for Gio with an rx-based reactive core and the MessageOp widget protocol",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Vibrant Gio",
"type": "Organization",
"login": "vibrantgio",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/213015821?v=4",
"created_at": "2025-05-23T06:49:49Z",
"is_verified": null,
"public_repos": 21,
"account_age_days": 432
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-07-28T12:41:22Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-20T10:02:42Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-16T07:46:24Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-06-01T05:12:15Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2026-04-24T09:31:21Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2026-04-23T12:36:12Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2025-05-04T12:57:38Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2025-03-21T21:51:18Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2025-02-13T10:25:17Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2025-02-12T16:20:24Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2023-08-29T10:59:51Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2023-07-26T10:23:38Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2023-06-12T10:21:13Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2023-05-26T07:26:40Z"
},
{
"tag": "v0.0.9",
"kind": "patch",
"published_at": "2022-06-01T17:56:00Z"
},
{
"tag": "v0.0.8",
"kind": "patch",
"published_at": "2022-05-25T16:29:23Z"
},
{
"tag": "v0.0.7",
"kind": "patch",
"published_at": "2022-05-25T08:43:41Z"
},
{
"tag": "v0.0.6",
"kind": "patch",
"published_at": "2022-05-22T07:45:39Z"
},
{
"tag": "v0.0.5",
"kind": "patch",
"published_at": "2022-05-18T20:02:42Z"
},
{
"tag": "v0.0.4",
"kind": "patch",
"published_at": "2022-05-18T13:20:29Z"
},
{
"tag": "v0.0.3",
"kind": "patch",
"published_at": "2022-05-10T12:04:57Z"
},
{
"tag": "v0.0.2",
"kind": "patch",
"published_at": "2022-04-30T19:12:49Z"
},
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2022-04-02T13:15:30Z"
}
],
"recent_commits": [
{
"oid": "0a0519058d407db1a34084d89a32666c522c9712",
"body": "The gio v0.9->v0.10 requires were edited in-workspace and left half\ntidied; standalone (GOWORK=off) builds failed on missing go.sum entries.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Complete gio v0.10 bump: tidy go.sum in root and example modules",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-07-28T12:41:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "28c390cf140b340d4a0540f78c3902e948b3df9a",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "example: raise indirect ivg to v0.1.4",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-07-20T11:31:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7caf4060bb66dcf1a50e202579579cd765841bc9",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "example: bump backdrop, circle, ivg/raster/gio, textdraw to latest",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-07-20T11:30:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e69fb4c43b38eeb9155750afed8f37814f09f5df",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "example: require mvu v0.4.0",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-07-20T10:02:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "00fa71db5aa809652dd253183839749525dbf986",
"body": "rx v0.3.0 changes Subscribe(observer, scheduler) to\nSubscribe(ctx, observer): the scheduler now travels in the context,\nrx.GoroutineContext() for the concurrent scheduler and a bare\ncontext.Background() for the default serial trampoline. Also pulls\nreactivego/scheduler v0.2.0.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Upgrade reactivego/rx to v0.3.0 (context-based Subscribe)",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-07-20T10:02:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6741feb26a78848b1d74efc5df636defbdd6adbc",
"body": "The example module intentionally stays separate so example dependencies\nnever reach the mvu root module. font v0.0.2 no longer compiles against\ngioui.org v0.9.0 (font.Font lost the Variant field), which only went\nunnoticed because workspace builds resolved font v0.0.3 through sibling\nmodules; standalone builds of the module were broken.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "example: require mvu v0.3.0; fix standalone build with font/style v0.0.3",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-07-16T07:48:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b8c76006d515ed071204ff968a44f112ef9750d8",
"body": "Loop(messages, init, update) is the message/command loop alone, window-free,\nfor apps that own their rendering (e.g. a spectrum window whose Render takes\na theme-fed layer builder). Run(w, init, update, view, layers...) wraps it\nfor plain windows. Commands returned by update — including long-running\n[…]\nntime[Model] struct existed only to carry the Model type parameter\nbefore Run was a free generic function; it is removed rather than deprecated.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Extract the MVU loop into generic Loop and Run functions; drop Runtime",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-07-16T07:46:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "07a25c7b1dccbcdd963e274c5a7b122c766016f3",
"body": null,
"is_bot": false,
"headline": "Add MIT license",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-07-15T16:26:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74905f66c80005362cb6868a7398396e2b20f971",
"body": "Add white-box tests for the registerCollector / MessageOp.Add /\nunregisterCollector mechanism that Window.Render's FrameEvent path relies\non: MessageOps added during a frame append to that frame's slice in order;\nAdds after unregister are dropped, not panicking; concurrently-registered\n*op.Ops keys \n[…]\n..}.Add(gtx.Ops)\nlands in the model on the originating frame) and de-risks the GX.10\nfeeds migration; mvu previously had no tests.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "mvu: test the frame-collector seam (MessageOp.Add → frame slice)",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-06-01T05:12:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "53669150973239bbdef7d0828214f44184f1d7fc",
"body": null,
"is_bot": false,
"headline": "Add comprehensive README and examples",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-05-10T03:44:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7082cad19d233cb7ef9a22344b7fb66fd68f18c3",
"body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump Gio to v0.9.0",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-05-09T07:15:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d26b12e8ad04a033a8d1df4606f3a71ea31ed459",
"body": "window.go: read events and call Frame() on the same goroutine. Gio v0.9\nintroduced a synchronous protocol where deliverEvent enters a select after\nsending FrameEvent and races between receiving the rendered frame on\ne.frames and sending theFlushEvent on e.events. The previous mvu loop had\na windowEv\n[…]\nilter,\ne.Kind, gesture.KindClick, op.InvalidateCmd, richtext.InteractiveText.Update).\n\nexample/go.mod: bump gioui.org/x to v0.9.0.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "mvu: fix Gio v0.9 event-loop deadlock; migrate examples",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-05-06T03:24:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "faf5a31fe8e59477b4c51efad5ff57c40863eac1",
"body": "Drops the unsafeOps cast against op.Ops.Internal. MessageOp.Add now\nwrites into a per-frame []MessageOp slice registered in a package-level\nmap keyed by *op.Ops; window.go drains the slice after layout. defer\nensures cleanup even on widget panic. No unsafe remains in mvu/.\n\nDischarges PLAN.md goal G−1.3. Advances NEXT.md cursor to G−1.4.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "G−1.3: replace unsafe.Pointer MessageOp extraction with collector map",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-05-05T00:53:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0aebf173c4f03b38e6e742538751ec20676ae7dc",
"body": "- window.go: replace rx.Recv(window.Events()) with goroutine→channel\n adapter around the blocking window.Event() method; switch\n system.FrameEvent→app.FrameEvent; use app.NewContext instead of\n layout.NewContext; correct unsafeOps struct (version uint32).\n- message.go: replace removed pointer.InputOp with event.Op.\n- NewWindow: new(app.Window) + w.Option() replaces removed app.NewWindow.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "G−1.2: migrate event loop to app.Window.Event(); fix message.go",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-05-05T00:41:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2f1835227be0a26e1693dd53c91cc75e2e7e1c10",
"body": null,
"is_bot": false,
"headline": "Update main.go",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-05-04T09:11:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c449e91d309da2bd961fc27df7cee408dbe03b8",
"body": "Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump ivg/raster/gio to v0.1.4 in examples",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-04-24T09:42:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5520921ee7e06d2e4d53f9238565d6f36ee22f74",
"body": "Removes stale vibrantgio/text indirect dependency.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump example vibrantgio dependencies to new versions",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-04-24T09:40:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4e040789f5448722dfa06bb3490ba9682b445e72",
"body": "Also updates examples to use vibrantgio/{textdraw,backdrop,gradient,circle,style}\npackages and refreshes dependencies.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Migrate examples from reactivego/mvu to vibrantgio/mvu",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-04-24T09:31:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8fb1b3720bd8b4fcffa35b1996650a56f509b4e3",
"body": null,
"is_bot": false,
"headline": "Rename module to github.com/vibrantgio/mvu",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-04-23T12:36:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce38e321fee0dec7b16c68ab0c1c5542e1e22a0d",
"body": null,
"is_bot": false,
"headline": "wip",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2026-04-23T10:52:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "796cef393429a032890c943c0e8e9988d46307a2",
"body": null,
"is_bot": false,
"headline": "Update rx library to v0.2.2 and adapt code to API changes",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2025-05-04T12:57:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05d4ae2970aa24718488d2d5d3e0a67f63434ccc",
"body": null,
"is_bot": false,
"headline": "Rename x package import to rx",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2025-03-21T21:51:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bf83f841964e1a68796dbb9d0a7e8d38f21218f",
"body": "The commit restructures the codebase by introducing a new Runtime type for managing\nModel-View-Update patterns, while simplifying command handling and removing\nredundant abstractions. The changes make the API more focused and easier to use.",
"is_bot": false,
"headline": "Add MVU runtime and simplify command handling",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2025-03-20T11:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "749b42aed2edc6070d149a0b9d6b589a4a24c3b1",
"body": null,
"is_bot": false,
"headline": "Change the command Nothing() to DoNothing()",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2025-02-13T10:25:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7fe8c0ecf40d2b86762d51afbf6f046e9145f65b",
"body": null,
"is_bot": false,
"headline": "Remove the file window.go that is no longer needed",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2025-02-13T10:24:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dab9cd0f61d18711d1b5380048c79e920ce9fa58",
"body": null,
"is_bot": false,
"headline": "Turn vibrant into a mvu architecture package",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2025-02-12T16:20:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce869afe60dcf65b224cc977786c0ba1729854ee",
"body": null,
"is_bot": false,
"headline": "Upgrade to latest reactivego/x",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2023-08-29T10:59:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4c3c84ce3f7c3eb1064853b6c326c89650eeaab",
"body": null,
"is_bot": false,
"headline": "Completely refactor the package",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2023-07-26T10:23:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ba274d4da62fd80538c0603a38c9b3ef10eaf75",
"body": null,
"is_bot": false,
"headline": "Add MsgOp and refactor code",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2023-06-12T10:21:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f13c35f65f23b87bec4754c6b8cb2f6841020b8a",
"body": null,
"is_bot": false,
"headline": "Establish status quo before cleanup",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2023-05-26T07:26:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f916b2cf095e2b51d25cc5146cd33275035eea0",
"body": null,
"is_bot": false,
"headline": "Update dependencies",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2023-04-09T21:00:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1949a8aaf2eb42e2b0a9fca1a1d072aaa2463f1a",
"body": null,
"is_bot": false,
"headline": "Drop code not related to gioui reactive extension",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2023-04-09T20:58:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7db203cbe8bde973df3eb729bbc35957a53d0066",
"body": null,
"is_bot": false,
"headline": "Update code to use latest gioui.org release",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-06-01T17:56:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1d1e37e7494ae55269b0b8112f09ad5c9422590",
"body": null,
"is_bot": false,
"headline": "Support sub-pixel offset in Text rendering",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-05-25T16:29:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4256bab71069122e93bef403b028062d2d91f90e",
"body": null,
"is_bot": false,
"headline": "Rename Print to Text and make ops argument first",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-05-25T08:43:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfa7b9b79351f68678a1281c696b83acaaebe9be",
"body": null,
"is_bot": false,
"headline": "Log errors that terminate the Render func",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-05-22T07:45:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b99dd9499492fcd8131e6ff076c28ba6f5dc899d",
"body": null,
"is_bot": false,
"headline": "Remove frame watchdog code",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-05-18T20:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9947e53efdfc0db01ff458fe549043760e6182c7",
"body": null,
"is_bot": false,
"headline": "Import 'x' instead of 'observable'",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-05-18T13:20:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a1fe59c7acb076b72a44296af323ba52a0dfaad",
"body": null,
"is_bot": false,
"headline": "Move Reset call into FrameEvent handler",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-05-10T12:04:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bc6b21d1dacec14ee0d96f96d252df5d9b94083",
"body": null,
"is_bot": false,
"headline": "Upgrade observable",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-05-10T12:03:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8257defd176daf76370ef51f70516372dc7d4a9",
"body": null,
"is_bot": false,
"headline": "Upgade dependencies and adapt to changes",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-04-30T19:12:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d9f58771262182d4477bf41e21eec76d622a2cb",
"body": null,
"is_bot": false,
"headline": "Update go mod info",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-04-02T13:15:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6aae84677e4a144e56b721902d7f886bd06fbdae",
"body": null,
"is_bot": false,
"headline": "Update to latest status quo",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2022-04-02T13:05:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e119faf9a36cd13c9eddbc5fc04ff0a4d68e7b8d",
"body": null,
"is_bot": false,
"headline": "Add icon example",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-12-21T13:58:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43ef66c0a73da942e2ed981b65274991db829981",
"body": null,
"is_bot": false,
"headline": "Update project to use the latest gioui.org release",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-12-21T13:49:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53425cc7543138a6b353c8345e8d69752b2ab378",
"body": null,
"is_bot": false,
"headline": "Update and generate code",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-10-13T10:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1555364ec2688ed261772009546a26dcb96c6555",
"body": null,
"is_bot": false,
"headline": "Put content streams on goroutine scheduler",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-10-13T10:55:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72d7e94e6a10d4f500969b3444669938b7778b64",
"body": null,
"is_bot": false,
"headline": "Generate JustCallOp for export",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-10-13T10:53:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3b07fe8fa86a6cce9a73d5d55356d1860cf3416",
"body": null,
"is_bot": false,
"headline": "Add logging of active handlers",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-10-13T10:53:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90744dddbaf24db840da076f3e39392712e3233c",
"body": null,
"is_bot": false,
"headline": "Delete handlers on unsubscribe",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-10-13T10:52:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0fc178ce4a004cee21858a782d23935ac36aac8",
"body": null,
"is_bot": false,
"headline": "Refactor theming code",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-10-13T10:34:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f61704d4ccb73bffc99375f2313a14bff847624",
"body": null,
"is_bot": false,
"headline": "Refactor ContextEvents and FrameEvents handling",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-09-05T10:33:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1c3360eb9a6bafb0e29ea08bddb9c0acb1cb157",
"body": null,
"is_bot": false,
"headline": "Rename context.go to contextevent.go",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-09-05T10:03:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e2ccd341f395798472b27d533419cc55b3ad6e2",
"body": null,
"is_bot": false,
"headline": "Add a Name method to EventHandler",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-09-05T09:56:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf09b4242e2a93848db7fd35fc0df2d5169386c0",
"body": null,
"is_bot": false,
"headline": "Update the version in go.mod",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-08-18T13:21:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e365cceb17ce186249a494eec4a2a0c7a90c35f3",
"body": null,
"is_bot": false,
"headline": "Update the go module files",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-08-18T12:40:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23d781994e70647226dd567a94832adfe5bae12f",
"body": null,
"is_bot": false,
"headline": "Add a simple hello example",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-08-18T12:34:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bff748463538c2c77b064e294e0eef9f52b3cc5b",
"body": null,
"is_bot": false,
"headline": "Add reactivex gio wrapper",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-08-18T12:31:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac4eee9d6c295442043fb8071303cf345bfec948",
"body": null,
"is_bot": false,
"headline": "Add a README.md to an empty repo",
"author_name": "René Post",
"author_login": "rene-post",
"committed_at": "2021-08-18T12:24:01Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 23,
"commits_last_year": 20,
"latest_release_at": "2026-07-28T12:41:22Z",
"latest_release_tag": "v0.4.1",
"releases_from_tags": true,
"days_since_last_push": 1,
"active_weeks_last_year": 7,
"days_since_latest_release": 1,
"mean_days_between_releases": 59
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/vibrantgio/mvu",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/vibrantgio/mvu",
"is_deprecated": false,
"latest_version": "v0.4.1",
"repository_url": "https://github.com/vibrantgio/mvu",
"versions_count": 23,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-28T12:41:22Z",
"latest_version_yanked": null,
"days_since_latest_publish": 1
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 1,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"example/go.mod",
"go.mod"
],
"largest_source_bytes": 4933,
"source_files_sampled": 21,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"example/go.mod",
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "gioui.org",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.10.0"
},
{
"name": "github.com/reactivego/rx",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.3.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "rene-post",
"commits": 59,
"avatar_url": "https://avatars.githubusercontent.com/u/1306351?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "18 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "0a0519058d407db1a34084d89a32666c522c9712",
"ran_at": "2026-07-30T01:04:30Z",
"aggregate_score": 2.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/vibrantgio/mvu",
"host": "github.com",
"name": "mvu",
"owner": "vibrantgio"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"security": 28,
"vitality": 70,
"community": 24,
"governance": 36,
"engineering": 38
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 70,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"commits_last_year": 20,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "20 commits in the last year",
"points": 11.9,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 20
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"releases_count": 23,
"latest_release_tag": "v0.4.1",
"releases_from_tags": true,
"days_since_latest_release": 1,
"mean_days_between_releases": 59
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "23 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 23
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~59 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 59
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 1,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 1 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 1
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 36,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"followers": 0,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "vibrantgio",
"public_repos": 21,
"account_age_days": 432
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of vibrantgio",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "vibrantgio"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "21 public repos, account ~1 yr old",
"points": 12.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 21
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/vibrantgio/mvu"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 1
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 1 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 1
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "23 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 23
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 38,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 30,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 28,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 28,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 2.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "18 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 54,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.237,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "14 of 59 human commits state their intent (structured subject or explanatory body)",
"points": 12.7,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 14,
"sampled": 59
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 73,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.254,
"toolchain_manifests": [
"example/go.mod",
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "example/go.mod, go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "example/go.mod, go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "15 of the last 59 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 15,
"sampled": 59
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 4933,
"source_files_sampled": 21,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/21 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 21,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"example"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-30T01:04:35.443160Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/v/vibrantgio/mvu.svg",
"full_name": "vibrantgio/mvu",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go.