Public recordGood
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-25 18:30 UTC
ximion / appstream
Tools and libraries to work with AppStream metadata
ximion/appstream holds a health index of 70 out of 100, placing it in the Good band. It scores highest on Vitality (87/100) and lowest on AI Readiness (52/100). It was last updated today. A single contributor accounts for most of its recent work.
70
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
70
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Matthias KlumppPersonal account
147 followers109 public repossince Sep 2010
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
87
Development activity
92Excellent
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 28.4/36 | Commit cadence — 41/52 weeks with commits |
| 18/18 | Commit volume — 272 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 272 |
| human_commit_share | 0.98 |
| days_since_last_push | 0 |
| active_weeks_last_year | 41 |
Release discipline
80Good
How it's scored
| 16.2/27 | Ships releases — 39 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 1 days ago |
| 19.8/27 | Release cadence — a release every ~91.2 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 39 |
| latest_release_tag | v1.1.5 |
| releases_from_tags | yes |
| days_since_latest_release | 1 |
| mean_days_between_releases | 91.2 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
64
Popularity & adoption
63Moderate
How it's scored
| 39.5/60 | Stars — 273 stars |
| 17.7/25 | Forks — 135 forks |
| 6/15 | Watchers — 13 watchers |
Inputs used
| forks | 135 |
| stars | 273 |
| watchers | 13 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
65Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (LGPL-2.1) |
| 0/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | yes |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
56
Maintainer resilience (bus factor)
39At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 6.8/22.5 | Commit distribution — top contributor authored 70% of commits |
| 13.5/13.5 | Contributor breadth — 99 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 40 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 99 |
| top_contributor_share | 0.698 |
How it's scored
| 41.1/46.8 | Issue resolution — 88% of issues closed |
| 30.3/38.3 | PR acceptance — 231/292 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 231 |
| open_issues | 54 |
| closed_issues | 391 |
| issue_closed_ratio | 0.879 |
| closed_unmerged_prs | 61 |
Ownership & stewardship
63Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 15.6/25 | Owner reach — 147 followers of ximion |
| 25/25 | Track record — 109 public repos, account ~15 yr old |
Inputs used
| followers | 147 |
| owner_type | User |
| is_verified | — |
| owner_login | ximion |
| public_repos | 109 |
| account_age_days | 5,780 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Engineering Quality
Are baseline engineering and documentation practices in place?
77
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 4 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 6.4/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | yes |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
90Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — http://www.freedesktop.org/wiki/Distributions/AppStream/ |
| 10/10 | Repository description |
| 10/10 | Topics — 5 topics |
| 0/10 | Wiki |
Inputs used
| topics | appstream, appstream-specification, freedesktop, metadata, metainfo |
| has_wiki | no |
| homepage | http://www.freedesktop.org/wiki/Distributions/AppStream/ |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
67
Security posture
67Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 40 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
| 5/5 | SAST — SAST tool detected: CodeQL |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 14 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 4 |
| scorecard_aggregate | 6.7 |
Excluded from scoring (no data or not applicable): branch_protection, ci_tests, packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
52
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 88 of 98 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.898 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — C (statically typed) |
| 0/10 | Reproducible environment |
| 6/10 | Demonstrated agent practice — 3 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 2 of the last 100 commits are automated dependency updates |
| 1/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.03 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.02 |
Code legibility for models
98Excellent
How it's scored
| 45/45 | Type-checkable code — C (statically typed) |
| 53.4/55 | Manageable file sizes — 8/267 source files over 60KB |
Inputs used
| primary_language | C |
| largest_source_bytes | 194,020 |
| source_files_sampled | 267 |
| oversized_source_files | 8 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — samples |
Inputs used
| example_dirs | samples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
273GitHub stars
99contributors
272commits, last 12 months
0days since last push
39releases
1bus factor
54open issues
—package ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 135 ⇿
0Stars
135Forks
37Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 5Patch 31
Each point covers 11 days.
OpenSSF Scorecard 6.7 / 10
6.7aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 40 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 1 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 1 |
| 10 | SAST | SAST tool detected: CodeQL |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
All dependencies 0
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"appstream",
"appstream-specification",
"freedesktop",
"metadata",
"metainfo"
],
"is_fork": false,
"size_kb": 41138,
"has_wiki": false,
"homepage": "http://www.freedesktop.org/wiki/Distributions/AppStream/",
"languages": {
"C": 2648861,
"C++": 273556,
"SmPL": 1663,
"CMake": 5122,
"Meson": 36784,
"Shell": 8893,
"Python": 16816
},
"pushed_at": "2026-07-24T18:48:43Z",
"created_at": "2014-09-10T14:39:51Z",
"owner_type": "User",
"updated_at": "2026-07-24T18:49:01Z",
"description": "Tools and libraries to work with AppStream metadata",
"is_archived": false,
"is_disabled": false,
"license_spdx": "LGPL-2.1",
"default_branch": "main",
"license_spdx_raw": "LGPL-2.1",
"primary_language": "C",
"significant_languages": [
"C"
]
},
"owner": {
"blog": "blog.tenstral.net",
"name": "Matthias Klumpp",
"type": "User",
"login": "ximion",
"company": null,
"location": "Heidelberg, Germany",
"followers": 147,
"avatar_url": "https://avatars.githubusercontent.com/u/417468?v=4",
"created_at": "2010-09-27T11:15:17Z",
"is_verified": null,
"public_repos": 109,
"account_age_days": 5780
},
"license": {
"state": "standard",
"spdx_id": "LGPL-2.1",
"raw_spdx": "LGPL-2.1",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.1.5",
"kind": "patch",
"published_at": "2026-07-24T18:27:30Z"
},
{
"tag": "v1.1.4",
"kind": "patch",
"published_at": "2026-07-22T16:23:15Z"
},
{
"tag": "v1.1.3",
"kind": "patch",
"published_at": "2026-06-18T17:29:18Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2026-01-28T20:13:49Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2025-10-02T18:11:10Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2025-09-16T19:35:54Z"
},
{
"tag": "v1.0.6",
"kind": "patch",
"published_at": "2025-08-14T14:54:01Z"
},
{
"tag": "v1.0.5",
"kind": "patch",
"published_at": "2025-04-24T15:29:42Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2024-12-08T22:34:32Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2024-04-24T18:02:43Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2024-02-24T21:22:21Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2023-12-16T17:20:48Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2023-11-11T18:48:03Z"
},
{
"tag": "v0.16.4",
"kind": "patch",
"published_at": "2023-11-10T20:28:04Z"
},
{
"tag": "v0.16.3",
"kind": "patch",
"published_at": "2023-08-22T21:51:55Z"
},
{
"tag": "v0.16.2",
"kind": "patch",
"published_at": "2023-04-26T19:08:44Z"
},
{
"tag": "v0.16.1",
"kind": "patch",
"published_at": "2023-02-10T19:53:14Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2023-01-26T21:55:30Z"
},
{
"tag": "v0.15.6",
"kind": "patch",
"published_at": "2022-12-22T22:46:45Z"
},
{
"tag": "v0.15.5",
"kind": "patch",
"published_at": "2022-08-22T17:42:44Z"
},
{
"tag": "v0.15.4",
"kind": "patch",
"published_at": "2022-05-22T21:04:47Z"
},
{
"tag": "v0.15.3",
"kind": "patch",
"published_at": "2022-04-10T19:20:53Z"
},
{
"tag": "v0.15.2",
"kind": "patch",
"published_at": "2022-02-22T16:52:22Z"
},
{
"tag": "v0.15.1",
"kind": "patch",
"published_at": "2021-12-22T17:52:36Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2021-12-02T21:54:03Z"
},
{
"tag": "v0.14.6",
"kind": "patch",
"published_at": "2021-10-08T17:30:54Z"
},
{
"tag": "v0.14.5",
"kind": "patch",
"published_at": "2021-08-28T20:13:10Z"
},
{
"tag": "v0.14.4",
"kind": "patch",
"published_at": "2021-06-22T18:52:21Z"
},
{
"tag": "v0.14.3",
"kind": "patch",
"published_at": "2021-03-08T14:49:30Z"
},
{
"tag": "v0.14.2",
"kind": "patch",
"published_at": "2021-03-02T02:57:19Z"
},
{
"tag": "v0.14.1",
"kind": "patch",
"published_at": "2021-02-16T19:20:53Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2021-02-02T16:03:44Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2020-11-30T22:30:25Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2020-11-30T18:57:51Z"
},
{
"tag": "v0.12.11",
"kind": "patch",
"published_at": "2020-05-12T16:51:34Z"
},
{
"tag": "v0.12.10",
"kind": "patch",
"published_at": "2020-01-18T18:12:09Z"
},
{
"tag": "v0.12.9",
"kind": "patch",
"published_at": "2019-09-24T18:19:04Z"
},
{
"tag": "v0.12.8",
"kind": "patch",
"published_at": "2019-08-16T18:19:03Z"
},
{
"tag": "v0.12.7",
"kind": "patch",
"published_at": "2019-06-16T20:53:58Z"
}
],
"recent_commits": [
{
"oid": "ac1b68ef692f1415784091c7a01bfe66f85b09f4",
"body": null,
"is_bot": false,
"headline": "trivial: post release version bump",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T18:48:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "843c9ad7b3ac3bc9ad5a5b03abe7b87bbcdd333c",
"body": null,
"is_bot": false,
"headline": "Release version 1.1.5",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T18:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7e7a01fffeec13669f718911336f2fe2fdcd933",
"body": "Currently translated at 96.3% (781 of 811 strings)\n\nCo-authored-by: Gabriel <bloxgabriel18@gmail.com>",
"is_bot": false,
"headline": "l10n: Portuguese (Brazil) translation updated",
"author_name": "Gabriel",
"author_login": "AgenteGabrielofc",
"committed_at": "2026-07-24T11:01:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a350713cfa7e24a3ad94b8104983eef3320f501c",
"body": "This is a bit nicer to read.",
"is_bot": false,
"headline": "qt: Use strndup for C string-list conversion",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T02:17:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7dd23ba5c83b4f79eadb8c83a5f4b26a7c12fdda",
"body": null,
"is_bot": false,
"headline": "trivial: Make semgrep happy, avoid strcpy",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T01:14:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc6210f0dfe72642bd63d8ff028d17e5ad8d11c1",
"body": "This worked before, but was broken in the libxmlb transition. Now,\nwildcard searches for modaliases should work again, in both directions.",
"is_bot": false,
"headline": "pool: Fix bidirectional wildcard search for modalias provides",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T00:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c02444f28534696e8d225390bb587a754bc8e13",
"body": null,
"is_bot": false,
"headline": "trivial: autoformat",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-24T00:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2f4a5cef067a4e25d5ab663825c60b44c39059e",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>",
"is_bot": false,
"headline": "l10n: Romanian translation updated",
"author_name": "Remus-Gabriel Chelu",
"author_login": "ramses-70",
"committed_at": "2026-07-23T20:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ad4ed3f0502f0c0525b5f8aa946365ed63e57d0",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Oğuz Ersen <oguz@ersen.moe>",
"is_bot": false,
"headline": "l10n: Turkish translation updated",
"author_name": "Oğuz Ersen",
"author_login": "oersen",
"committed_at": "2026-07-23T20:01:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28cb9d3401086614412508d8a67d64752df8e37e",
"body": "Resolves: #767",
"is_bot": false,
"headline": "qt: Add back wrong const Component::addBundle for ABI compatibility",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-23T07:11:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c282a075a661b19e7207898e1bf4ea5fc901b4fc",
"body": null,
"is_bot": false,
"headline": "trivial: qt: Require Qt6",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-23T00:54:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "437baba270bf8ba45d39b137800b4b7129773aa7",
"body": null,
"is_bot": false,
"headline": "trivial: autoformat",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-23T00:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "773c72540eb356fb56b7f23ea841b15488ffbc66",
"body": "Use the CoreGraphics (Quartz Display Services) API to find the largest\nactive display and read its size in points, which are already the\nlogical pixels we want, with any HiDPI (\"Retina\") scaling factored out.\n\nUnlike the Wayland backend, CoreGraphics is linked directly, as the\nframework is present on every macOS system.\n\nResolves: #765\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "sysinfo: Implement display size detection on macOS",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-23T00:46:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "42d34f87e84dc65a88eaaa05b13ae95ebf06d8ac",
"body": "CC: #765",
"is_bot": false,
"headline": "sysinfo: Make it easier to implement platform-specific display detection",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-23T00:12:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de2f0115a1bab3efafee55c3f075a972b92d9b2b",
"body": null,
"is_bot": false,
"headline": "trivial: post release version bump",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-22T16:41:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96c4c1fada6a0131a0b777577bdf353251a6021a",
"body": null,
"is_bot": false,
"headline": "Release version 1.1.4",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-22T16:23:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "761058d793f4a6e36a89d55e3699426b9bd5b389",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Yuri Chornoivan <yurchor@ukr.net>",
"is_bot": false,
"headline": "l10n: Ukrainian translation updated",
"author_name": "Yuri Chornoivan",
"author_login": "yurchor",
"committed_at": "2026-07-22T16:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48ed49a5afac2307c7317d983fdee3fbebc9b41c",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Martin Srebotnjak <miles@filmsi.net>",
"is_bot": false,
"headline": "l10n: Slovenian translation updated",
"author_name": "Martin Srebotnjak",
"author_login": "filmsi",
"committed_at": "2026-07-22T16:06:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a81c4759aa8264f6dbb88d456513948ab976ee2",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Anders Jonsson <anders.jonsson@norsjovallen.se>",
"is_bot": false,
"headline": "l10n: Swedish translation updated",
"author_name": "Anders Jonsson",
"author_login": "haaninjo",
"committed_at": "2026-07-21T23:02:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e22cd4a50e42b9d77433191e1f35307572dd2fa",
"body": "Currently translated at 100.0% (811 of 811 strings)\n\nCo-authored-by: Matthaiks <kitynska@gmail.com>",
"is_bot": false,
"headline": "l10n: Polish translation updated",
"author_name": "Matthaiks",
"author_login": "Matthaiks",
"committed_at": "2026-07-21T23:02:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6906ea23211ed1f9706d779c1c308a07e988682",
"body": null,
"is_bot": false,
"headline": "pool: Properly implement cancellation of load operations",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T21:20:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3a49df95ba8a5c015e3cd93edd37b6827261397",
"body": "Resolves: #720",
"is_bot": false,
"headline": "Make GResources we need outlive main thread destruction",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T21:20:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52883a64be71628d5eb3784575c840d987571fae",
"body": "Currently translated at 96.7% (785 of 811 strings)\n\nCo-authored-by: Anders Jonsson <anders.jonsson@norsjovallen.se>",
"is_bot": false,
"headline": "l10n: Swedish translation updated",
"author_name": "Anders Jonsson",
"author_login": "haaninjo",
"committed_at": "2026-07-21T19:33:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cd7a0233ebb43ec7be016b4eadc611896c88218",
"body": "Updated by \"Update PO files to match POT (msgmerge)\" add-on in Weblate.\n\nCo-authored-by: Hosted Weblate <hosted@weblate.org>\nTranslate-URL: https://hosted.weblate.org/projects/appstream/translations/\nTranslation: AppStream/Translations",
"is_bot": false,
"headline": "l10n: Update translation files",
"author_name": "Hosted Weblate",
"author_login": "weblate",
"committed_at": "2026-07-21T19:33:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "109886edf46768c20ccc91a5edd226b5e0525822",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Martin Srebotnjak <miles@filmsi.net>",
"is_bot": false,
"headline": "l10n: Slovenian translation updated",
"author_name": "Martin Srebotnjak",
"author_login": "filmsi",
"committed_at": "2026-07-21T19:33:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51ec54dcf06634c52402005b887386dcbb8471e4",
"body": null,
"is_bot": false,
"headline": "l10n: Update",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T19:27:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8937e0f74f023c4d81cdeb5808be52a70ee6249",
"body": "Currently translated at 43.1% (338 of 783 strings)\n\nCo-authored-by: Temuri Doghonadze <temuri.doghonadze@gmail.com>",
"is_bot": false,
"headline": "l10n: Georgian translation updated",
"author_name": "Temuri Doghonadze",
"author_login": "NorwayFun",
"committed_at": "2026-07-21T10:03:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f850ab4cd5831cfc0ffb10258a532374e5d33e3",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Remus-Gabriel Chelu <remusgabriel.chelu@disroot.org>",
"is_bot": false,
"headline": "l10n: Romanian translation updated",
"author_name": "Remus-Gabriel Chelu",
"author_login": "ramses-70",
"committed_at": "2026-07-21T10:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac9f38f864dbfe932b23513507256cf563379bba",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Yuri Chornoivan <yurchor@ukr.net>",
"is_bot": false,
"headline": "l10n: Ukrainian translation updated",
"author_name": "Yuri Chornoivan",
"author_login": "yurchor",
"committed_at": "2026-07-21T10:02:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24734349489473fa7d4e302ba276dc28e0091e65",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Anders Jonsson <anders.jonsson@norsjovallen.se>",
"is_bot": false,
"headline": "l10n: Swedish translation updated",
"author_name": "Anders Jonsson",
"author_login": "haaninjo",
"committed_at": "2026-07-21T10:02:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b4c08bddc4d81e4d62566cc9f2c4e74de64d2c3",
"body": "Currently translated at 99.6% (780 of 783 strings)\n\nCo-authored-by: Сергей <asvmail.as@gmail.com>",
"is_bot": false,
"headline": "l10n: Russian translation updated",
"author_name": "Сергей",
"author_login": "Ser82-png",
"committed_at": "2026-07-21T10:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7ee92a6ea4945f34dacfd821dbd1b5ca14bfaaf",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Matthaiks <kitynska@gmail.com>",
"is_bot": false,
"headline": "l10n: Polish translation updated",
"author_name": "Matthaiks",
"author_login": "Matthaiks",
"committed_at": "2026-07-21T10:02:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4936fe8f6fe649f1d3b093650282b66ea88d1e2b",
"body": "Currently translated at 100.0% (783 of 783 strings)\n\nCo-authored-by: Libre <6n0n1m0s@proton.me>",
"is_bot": false,
"headline": "l10n: Spanish translation updated",
"author_name": "Libre",
"author_login": null,
"committed_at": "2026-07-21T10:02:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82cfbe08305d468d21a080bb290a5c38e4deed79",
"body": "* Fix a memory leak of the display-name prompt string.\n* Honor the --locale flag for submit-review, instead of silently\n ignoring it.\n* Count the review summary length limit in characters, not bytes, so\n non-ASCII summaries are not rejected too early.\n* Keep the \"[y/n]\" hint of the publish confirmation untranslated, since\n only the literal answers \"y\" / \"yes\" are accepted.",
"is_bot": false,
"headline": "ascli: Fix some issues in the interactive review submission",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T06:07:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a60bddcd0694db0e9601aa6e3ddb0f0373947257",
"body": null,
"is_bot": false,
"headline": "trivial: autoformat",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T06:06:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17ad81ff2a678c572c05a650d68b96ea8dfec6f2",
"body": "When the reviews server received our request but rejected it with an\nerror description (e.g. a semantic 400), we raised ERROR_NETWORK, making\nit impossible for callers to tell an actual connectivity problem from a\nrejected submission. Such replies now yield ERROR_FAILED with the\nserver-provided message.",
"is_bot": false,
"headline": "reviews: Distinguish server-side rejections from network failures",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T06:06:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e36666d20ebda1dc6cee9acaea7337e8ee41569e",
"body": "…uests\n\nFailed download attempts could leave partial data (e.g. an HTML error\npage from a 5xx reply) in the write sink, which a successful retry would\nthen append to, corrupting the downloaded data. We now discard any\npartially received data before each retry attempt, for both in-memory\nbuffers and \n[…]\nigned on every path.\n\nSince POST requests may not be idempotent, they are now only retried\nwhen the connection could not be established at all, so a request can\nnever be processed twice by the server.",
"is_bot": false,
"headline": "curl: Fix retry-loop data corruption and don't blindly retry POST req…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T06:05:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34054b742301fc6df5a7bd1428b6a28b569ec957",
"body": null,
"is_bot": false,
"headline": "docs: ascli: Add missing documentation for list-reviews",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T04:28:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad795b0b0649f59afeadfe45143880283ef9a8a6",
"body": null,
"is_bot": false,
"headline": "reviews: Implement support for submitting reviews",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T04:08:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4ba11a18e6c92a4ba444b70e699c917b59eacde",
"body": null,
"is_bot": false,
"headline": "trivial: typo",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T02:54:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d97e1711af2dcfbea31d0ce02d8f009b70d7c6ee",
"body": null,
"is_bot": false,
"headline": "trivial: Fix build on ancient Fedora",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T02:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7be7a1c61edb5958faeb778afa8458d499a693b1",
"body": null,
"is_bot": false,
"headline": "reviews: Add start parameter for review pagination",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T02:12:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2cf07208bdd330c203621728baa810e780df0a5",
"body": null,
"is_bot": false,
"headline": "ci: Bump Ubuntu LTS version",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T02:12:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43e243ca044005c7b8352ad7d1fb8f2e01d9a3dc",
"body": null,
"is_bot": false,
"headline": "reviews: Add simply sync interface to fetch ODRS reviews for a component",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-21T01:44:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dff6769a6463de55da526824546bce798fe8145",
"body": null,
"is_bot": false,
"headline": "curl: Allow making POST requests and changing the user agent",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T23:26:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44062265dc179ae0519b653326719bd77c347223",
"body": "Updated by \"Update PO files to match POT (msgmerge)\" add-on in Weblate.\n\nCo-authored-by: Hosted Weblate <hosted@weblate.org>\nTranslate-URL: https://hosted.weblate.org/projects/appstream/translations/\nTranslation: AppStream/Translations",
"is_bot": false,
"headline": "l10n: Update translation files",
"author_name": "Hosted Weblate",
"author_login": "weblate",
"committed_at": "2026-07-20T21:02:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14b9c88171622ac6783b6a087cd16183cbad19d7",
"body": null,
"is_bot": false,
"headline": "l10n: Update",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T21:01:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3183bdbfb1ad671f2e540c47e8972368f377d44",
"body": null,
"is_bot": false,
"headline": "Implement support for GCVE as vulnerability database provider",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T20:59:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69fafebb26dfe8b77f050ef0fd56732fcb457be1",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/checkout from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T20:26:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b72cbe7335ddd28dd5146e8570b5c30f1d49d39c",
"body": null,
"is_bot": false,
"headline": "trivial: Update static data",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T19:37:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "357cbb413f4337034e1fbedda78dd45221533bc7",
"body": null,
"is_bot": false,
"headline": "trivial: Update clang-format",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T08:13:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "620503f74a47c339e78ec02cc9c2947f90eb1646",
"body": "Bring the remaining accessors in line with the C library, so that data\nreachable from libappstream is also reachable from Qt.\n\nTests extended using Claude Opus 4.8.",
"is_bot": false,
"headline": "qt: Wrap missing C API on existing classes",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T07:47:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca1738be981a70feef4702ad798a4a336a956536",
"body": "We omit AsIssue here, as that is in a separate branch that should be\nmerged soon.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "qt: Add Artifact, Checksum, Reference, Review and Agreement wrappers",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T07:21:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "014df81039133444cb4cfec006631f7d6243c262",
"body": "This fully harmonizes the enums and fixes a bunch of subtle conversion\nbugs that may have caused issues when using the Qt API.\n\nThis conversion was partially automated using Claude Opus 4.8.",
"is_bot": false,
"headline": "qt: Sync enum mirrors with the C library",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T07:15:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "339d0d02555d536b427a54af5c70b818341b1c79",
"body": "The array allocation reserved `sizeof(char *) * list.size() + 1`, which\nis\none *byte* of slack rather than one pointer slot. Writing the NULL\nterminator at array[list.size()] therefore overran the allocation by\nsizeof(char*) - 1 bytes on every call that passes a string list to C.\n\nFound via Scrutineer + Anthropic Opus 4.8",
"is_bot": false,
"headline": "qt: Fix buffer overrun in stringListToCharArray",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T07:10:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e9341b33d68fcbd817cbf98bccb6c653743249b",
"body": null,
"is_bot": false,
"headline": "ci: Update Ubuntu LTS to 26.04",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-20T06:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71711e6568be7c8df2af475f36b58b22440b7b6d",
"body": null,
"is_bot": false,
"headline": "trivial: yaml: Ensure branding color values are also consistently quoted",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-18T01:25:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "564e1d8ca2a9260b97648166735831794e6bcc28",
"body": null,
"is_bot": false,
"headline": "yaml: Ensure version relations are consistently quoted",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-18T01:11:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46cf6296663aabf82207a3191482a6ce5b94875f",
"body": "… change\n\nResolves: #756",
"is_bot": false,
"headline": "yaml: Adjust tests and emitter to work around libfyaml string-quoting…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-18T00:51:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52dc2d2654274e662e639ead8bc9169b29662110",
"body": "…YAML",
"is_bot": false,
"headline": "trivial: apt: Fix potential integer underflow when reading corrupted …",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T23:24:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab744841dd5bb44b0c953f4a50ff1fa1e922de8a",
"body": "…values",
"is_bot": false,
"headline": "yaml: Fix potential crashes when encountering missing relation entry …",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T23:12:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c5765330a797e35b211993a97074dcbee089f94",
"body": "AppStream only allows HTTP(S) URLs to be followed, allowing more is\nsimply an unnecessary attack surface. Restrict the usable protocols.\n\nThis was found using AlphaOmega's Scrutineer tool on Opus 4.6.",
"is_bot": false,
"headline": "curl: Harden downloader by restricting protocols to only HTTP(S)",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T22:47:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfb3793dcc68b763c04e8b31a683a78609960bed",
"body": null,
"is_bot": false,
"headline": "ci: freebsd: Switch from Cirrus to GitHub Actions",
"author_name": "Gleb Popov",
"author_login": "arrowd",
"committed_at": "2026-07-17T16:44:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc6c5d0f5c910efca3f4377ac68431706eaf4021",
"body": "Like the handset template before, the tablet template described a\n2012-era device: 600x1024 logical pixels meant every application\ncarrying the implicit 768px minimum display requirement scored a\nhard zero on tablets. Modern tablets provide about 800x1280 logical\npixels, making them display-wise equivalent to the desktop template,\njust with touch input instead of keyboard and pointing devices.",
"is_bot": false,
"headline": "sysinfo: Assume a more modern display for the tablet chassis template",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T07:20:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "006c4453b80cc521f6e28a48d029bc48f513784b",
"body": "A relation check that fails with an error (status ERROR) means we\ncould not determine whether the requirement is met, not that it is\nunmet. The most common case is an unknown display length on systems\nwhere no GUI frontend has provided it (e.g. X11 sessions, where we\ncan not autodetect it), which vi\n[…]\nop application.\n\nTreat an errored required check like one with unknown status and\napply the same -30 penalty instead of returning 0 immediately.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "relation-check-result: Don't zero the score if a required check errored",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T07:18:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9ee831dfe74bcfb2282a14f3c5e2226ca1997d09",
"body": "…ints\n\nDisplay length relations compare against the shortest side of the\ndisplay rectangle by default. This makes upper-bound constraints\nineffective for excluding large screens: A 4K television has a\nshortest edge of only 2160 logical pixels and would happily satisfy\nthe \"lt 3840\" constraint our own example used to exclude television\nscreens.\n\nFix the example to constrain the longest side and add a note\nexplaining the pitfall.",
"is_bot": false,
"headline": "docs: Suggest using the longest display side for maximum size constra…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T07:18:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44486041932d16c29833f01cc56b689b8490da29",
"body": null,
"is_bot": false,
"headline": "trivial: ci: Install Wayland client development files",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T06:15:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bfd187bdcf749fe9992c3536608a966bcd4eabb",
"body": "Wayland initially was designed without fractional scaling in mind, so we\nneed the additional xdg-output protocol to get that information for such\ndisplays.\n\nIf the compositor provides the xdg-output protocol, we now read the\ntrue logical size of each output from it, and only fall back to the\ninteger\n[…]\nlly-generated code, which we just hardcoded for the\nzxdg-output-v1 protocol. Ugly, but the only wy to get this information\nfrom Wayland compositors (since there is no generic D-Bus protocol for\nthis).",
"is_bot": false,
"headline": "system-info: Handle fractional display scaling via xdg-output",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T06:08:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f40d1aca770cd9a2eedc53a599fd7364b20cc0c",
"body": "If no display length was set explicitly and we are in a Wayland\nsession, libappstream now determines the size of the largest connected\ndisplay automatically by connecting to the compositor and reading the\nlogical size (pixel mode / scale) of its outputs.\n\nSince libappstream must not gain a runtime dependency on any GUI\nlibrary, libwayland-client is dlopen'ed only if it is available at\nruntime.\n\nWe also do not yet handle fractional scaling, this needs to be added as\na separate patch.",
"is_bot": false,
"headline": "system-info: Initial code to autodetect the display size on Wayland",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T06:05:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0691471e165e147500ded10f93c1720d26be1cb",
"body": "…plate\n\nThe previous 320x480 (HVGA) assumption is very dated, a logical\nresolution of 360x720 is representative of modern phones and matches\nthe 360px shortest-edge minimum that adaptive mobile apps commonly\nrequire.\n\nThis also adjusts the compatibility-score test expectations for the\nnow-correct chassis template display values: A phone app that fits the\ndesktop display no longer gets a zero score there, it is only penalized\nfor its missing touch input.",
"is_bot": false,
"headline": "system-info: Assume a more modern display for the handset chassis tem…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-17T01:17:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff61a771b900f7391098e247de5bae229e0d250f",
"body": "as_system_info_set_display_length() was missing an else branch, so\nsetting the longest display edge also overwrote the shortest one.\nThis made all chassis templates end up with identical values for\nboth display sides.",
"is_bot": false,
"headline": "system-info: Fix display-length setter overriding the shortest edge",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-16T22:38:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c82fb161fa43b4d612613ef753061bef656898e4",
"body": "…tyles",
"is_bot": false,
"headline": "trivial: meson: Provide a nicer error message for missing Docbook 5 s…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-07-16T20:01:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd5987b44f52e2b5633a97c592e0faaffedd4ab2",
"body": "Currently translated at 99.4% (774 of 778 strings)\n\nCo-authored-by: Yago Raña Gayoso <yago.rana.gayoso@gmail.com>",
"is_bot": false,
"headline": "l10n: Galician translation updated",
"author_name": "Yago Raña Gayoso",
"author_login": "xuars",
"committed_at": "2026-07-01T03:01:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5bb687825e342acc086b164d17467560a6c5874",
"body": "Currently translated at 64.1% (499 of 778 strings)\n\nCo-authored-by: Kieli Puoli <kielipuoli@gmail.com>",
"is_bot": false,
"headline": "l10n: Finnish translation updated",
"author_name": "Kieli Puoli",
"author_login": null,
"committed_at": "2026-06-28T09:01:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4795fb5a18d878eddfbee57b8d7e8d951620d478",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/checkout from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T05:21:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "782dee9bf49d2a74c7086d0b983aaa021dc4f1ec",
"body": null,
"is_bot": false,
"headline": "trivial: post release version bump",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-18T17:49:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "559d20cd46919346ef05916c58f75cbfe1a1c919",
"body": null,
"is_bot": false,
"headline": "Release version 1.1.3",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-18T17:29:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cad1b2149b29bc0d216c9eaed38ea75416aa666",
"body": "Currently translated at 100.0% (778 of 778 strings)\n\nCo-authored-by: Gabriel <bloxgabriel18@gmail.com>",
"is_bot": false,
"headline": "l10n: Portuguese (Brazil) translation updated",
"author_name": "Gabriel",
"author_login": "AgenteGabrielofc",
"committed_at": "2026-06-18T12:01:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "850de54a168df8cc129184c13ef4eb230dbae3af",
"body": "…e-blocks",
"is_bot": false,
"headline": "news-convert: Handle extra linebreaks better and add support for issu…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-17T06:23:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77f6ea152367385809c8db867a382558ec01794c",
"body": null,
"is_bot": false,
"headline": "trivial: Autoformat",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T18:40:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dab3900047586b4a1d26a003503db3617879eeda",
"body": null,
"is_bot": false,
"headline": "Never emit usertags that are missing a namespace",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T18:39:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec8e61f138c30357488465265c3d822b20913fd7",
"body": "The spec says \"The tag must also have a namespace attribute\",\nconsequently, since this is a *MUST* directive, we should reject any tag\nwithout namespace. It could be a warning, but since this may lead to\nmissing important data, an error is probably justified.",
"is_bot": false,
"headline": "validator: Tags without namespace are an error",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T18:28:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0867a92334096760e757f2031be7f5b429572a19",
"body": null,
"is_bot": false,
"headline": "Update static data",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T17:23:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "007d8d129d2b9f2aee14748aad8a2b3f19571181",
"body": null,
"is_bot": false,
"headline": "trivial: ci: Install Docbook 5 XSL",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T08:10:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1cf39e5a6dde65cbc887b35adac39acf386fa06",
"body": null,
"is_bot": false,
"headline": "docs: Convert to Docbook 5",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T08:06:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f88d7d5a1158ccfeed19f46f2644042f06cc52b1",
"body": "…letypes\n\nThis is alongside PNG, so both PNG and JXL are supported for icons. This\ndoes not change the available formats for screenshot images.",
"is_bot": false,
"headline": "Officially support & read JXL images for icons, validate permitted fi…",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T03:42:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "892eff324bed895828e14c82ac32983000981c39",
"body": "This reverts commit de5a582789be4931f7fe3958386b21763360ce4b.\n\nThere will be some API-breaking changes coming with the next release,\nsuch as sandboxed media processing and JPEG-XL support, so it makes\nsense to hold off dropping it for one more release.",
"is_bot": false,
"headline": "Revert \"compose: Drop API instability warning\"",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-06-16T00:08:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "523a45ef9a09b646556a9b3bc777586d8ffc4f32",
"body": "…#750)\n\nAutomated fix generated by OrbisAI Security",
"is_bot": false,
"headline": "compose: add bounds checks when parsing malformed translation files (…",
"author_name": "OrbisAI Security",
"author_login": null,
"committed_at": "2026-06-16T00:03:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5402e3e9cd563425bca3b89995237d9d9d27fbbc",
"body": "Currently translated at 100.0% (778 of 778 strings)\n\nCo-authored-by: தமிழ்நேரம் <tamilneram247@gmail.com>",
"is_bot": false,
"headline": "l10n: Tamil translation updated",
"author_name": "தமிழ்நேரம்",
"author_login": "TamilNeram",
"committed_at": "2026-06-15T03:01:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e64433a1eaace498ba083efd760dcc3399d7b751",
"body": "```\nDirect leak of 16 byte(s) in 1 object(s) allocated from:\n #0 0x7f14ae4e6f2b in malloc (/lib64/libasan.so.8+0xe6f2b) (BuildId: 25975f766867e9e604dc5a71a8befeaed3301942)\n #1 0x7f14aebcaca9 in g_malloc (/lib64/libglib-2.0.so.0+0x47ca9) (BuildId: 7460891e8cbad6f228b9a8d1dfc92d12bb8a8a7d)\n #\n[…]\no.0+0x74751) (BuildId: 7460891e8cbad6f228b9a8d1dfc92d12bb8a8a7d)\n #6 0x7f14ae428ee5 in asan_thread_start(void*) (/lib64/libasan.so.8+0x28ee5) (BuildId: 25975f766867e9e604dc5a71a8befeaed3301942)\n```",
"is_bot": false,
"headline": "compose: Free array from asc_result_get_component_ids_with_hints",
"author_name": "bbhtt",
"author_login": "bbhtt",
"committed_at": "2026-05-27T15:56:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "daa7d9608356f11715241589b448a80f6f19c6d4",
"body": "```\nIndirect leak of 12 byte(s) in 1 object(s) allocated from:\n #0 0x557432e34af8 in malloc (/__w/flatpak-builder/flatpak-builder/builddir/src/flatpak-builder+0x16baf8) (BuildId: fedaf9746ee75c7de57cf0bb3c5eb79d9c0f8dd8)\n #1 0x7f95fd995679 in g_malloc (/usr/lib/x86_64-linux-gnu/libglib-2.0.so.\n[…]\nrt (/__w/flatpak-builder/flatpak-builder/builddir/src/flatpak-builder+0xc6554) (BuildId: fedaf9746ee75c7de57cf0bb3c5eb79d9c0f8dd8)\n```\n\nFixes: ba01b6f3 (\"compose: Implement more flexible icon policy\")",
"is_bot": false,
"headline": "compose: Unref icon_policy in asc_compose_finalize",
"author_name": "bbhtt",
"author_login": "bbhtt",
"committed_at": "2026-05-27T15:56:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "682671d5c35aa104f15159710cefb6f41a26db2f",
"body": "It's not actually generally useful, if we really need stuff to inline in\na specific case, more targeted activation of this flag makes more sense.",
"is_bot": false,
"headline": "meson: Drop -Winline from maintainer flags",
"author_name": "Matthias Klumpp",
"author_login": "ximion",
"committed_at": "2026-05-27T15:53:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "510ec119e36a660d10db64be0bdadd2909434e53",
"body": "As of https://gitlab.freedesktop.org/fontconfig/fontconfig/-/commit/\nb4b753d66dea17d645166adca239a0fba84d03a9 first included in 2.18.0\nFcFreeTypeQuery has been moved to fcfreetype.h",
"is_bot": false,
"headline": "Explicitly add fcfreetype.h include to asc-font.c",
"author_name": "Tom Pollard",
"author_login": "tom--pollard",
"committed_at": "2026-05-26T13:45:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1ba38ad68ff5d0ad6720163b5dbb056fbb8f9fa",
"body": "Currently translated at 100.0% (778 of 778 strings)\n\nCo-authored-by: Libre <6n0n1m0s@proton.me>",
"is_bot": false,
"headline": "l10n: Spanish translation updated",
"author_name": "Libre",
"author_login": null,
"committed_at": "2026-05-22T08:11:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd4a1003c870d4c7e47cdc315b1219bd31330751",
"body": "Currently translated at 20.0% (156 of 778 strings)\n\nCo-authored-by: jonnysemon <jonnysemon@users.noreply.hosted.weblate.org>",
"is_bot": false,
"headline": "l10n: Arabic translation updated",
"author_name": "jonnysemon",
"author_login": null,
"committed_at": "2026-04-30T09:09:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc0db6c21de467b42416c8d94b65e3d72aebc696",
"body": "Currently translated at 18.3% (143 of 778 strings)\n\nCo-authored-by: jonnysemon <jonnysemon@users.noreply.hosted.weblate.org>",
"is_bot": false,
"headline": "l10n: Arabic translation updated",
"author_name": "jonnysemon",
"author_login": null,
"committed_at": "2026-04-19T06:09:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a3c92930ac2a5526f5557ad17f5f9e8787a8c18",
"body": "Currently translated at 18.2% (142 of 778 strings)\n\nCo-authored-by: jonnysemon <jonnysemon@users.noreply.hosted.weblate.org>",
"is_bot": false,
"headline": "l10n: Arabic translation updated",
"author_name": "jonnysemon",
"author_login": null,
"committed_at": "2026-04-16T04:11:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7507b884b7cde297d67804862fe41d6d78e605fd",
"body": "Currently translated at 91.6% (713 of 778 strings)\n\nCo-authored-by: Alessandro Scarozza <xan.scale@gmail.com>",
"is_bot": false,
"headline": "l10n: Italian translation updated",
"author_name": "Alessandro Scarozza",
"author_login": "xanscale",
"committed_at": "2026-04-14T21:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f32a8d77fdfcdad2896c04769981f347a4d6a42b",
"body": "Currently translated at 100.0% (778 of 778 strings)\n\nl10n: Serbian (Latin script) translation updated\n\nCurrently translated at 100.0% (778 of 778 strings)\n\nCo-authored-by: Марко М. Костић <marko.m.kostic@gmail.com>",
"is_bot": false,
"headline": "l10n: Serbian translation updated",
"author_name": "Марко М. Костић",
"author_login": "kostich",
"committed_at": "2026-04-11T08:10:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fac9f939a599e69afae557844fb5e92c9f0e33a",
"body": "Currently translated at 85.0% (662 of 778 strings)\n\nCo-authored-by: Alessandro Scarozza <xan.scale@gmail.com>",
"is_bot": false,
"headline": "l10n: Italian translation updated",
"author_name": "Alessandro Scarozza",
"author_login": "xanscale",
"committed_at": "2026-04-09T04:09:54Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 39,
"commits_last_year": 272,
"latest_release_at": "2026-07-24T18:27:30Z",
"latest_release_tag": "v1.1.5",
"releases_from_tags": true,
"days_since_last_push": 0,
"active_weeks_last_year": 41,
"days_since_latest_release": 1,
"mean_days_between_releases": 91.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 71,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 135,
"stars": 273,
"watchers": 13,
"fork_history": {
"days": [
{
"date": "2015-01-21",
"count": 1
},
{
"date": "2015-04-28",
"count": 1
},
{
"date": "2015-05-04",
"count": 1
},
{
"date": "2016-01-11",
"count": 1
},
{
"date": "2016-01-15",
"count": 1
},
{
"date": "2016-02-10",
"count": 1
},
{
"date": "2016-05-04",
"count": 1
},
{
"date": "2016-08-03",
"count": 1
},
{
"date": "2016-08-16",
"count": 1
},
{
"date": "2016-08-28",
"count": 1
},
{
"date": "2016-09-08",
"count": 1
},
{
"date": "2016-09-29",
"count": 1
},
{
"date": "2016-11-08",
"count": 1
},
{
"date": "2016-11-24",
"count": 1
},
{
"date": "2017-02-08",
"count": 1
},
{
"date": "2017-05-31",
"count": 1
},
{
"date": "2017-06-13",
"count": 1
},
{
"date": "2017-06-20",
"count": 1
},
{
"date": "2017-06-28",
"count": 1
},
{
"date": "2017-08-31",
"count": 1
},
{
"date": "2017-11-05",
"count": 1
},
{
"date": "2017-11-23",
"count": 1
},
{
"date": "2017-12-27",
"count": 1
},
{
"date": "2017-12-28",
"count": 1
},
{
"date": "2018-01-30",
"count": 2
},
{
"date": "2018-02-02",
"count": 1
},
{
"date": "2018-04-13",
"count": 1
},
{
"date": "2018-06-14",
"count": 1
},
{
"date": "2018-08-22",
"count": 1
},
{
"date": "2018-10-07",
"count": 1
},
{
"date": "2018-10-31",
"count": 1
},
{
"date": "2018-12-04",
"count": 1
},
{
"date": "2019-04-12",
"count": 1
},
{
"date": "2019-04-23",
"count": 1
},
{
"date": "2019-05-17",
"count": 1
},
{
"date": "2019-11-30",
"count": 1
},
{
"date": "2019-12-28",
"count": 1
},
{
"date": "2020-02-20",
"count": 1
},
{
"date": "2020-02-26",
"count": 1
},
{
"date": "2020-04-23",
"count": 1
},
{
"date": "2020-05-29",
"count": 1
},
{
"date": "2020-06-28",
"count": 1
},
{
"date": "2020-10-31",
"count": 1
},
{
"date": "2020-11-12",
"count": 1
},
{
"date": "2021-02-10",
"count": 1
},
{
"date": "2021-07-22",
"count": 1
},
{
"date": "2021-09-13",
"count": 1
},
{
"date": "2021-10-20",
"count": 1
},
{
"date": "2021-11-14",
"count": 1
},
{
"date": "2021-12-28",
"count": 1
},
{
"date": "2021-12-31",
"count": 1
},
{
"date": "2022-01-06",
"count": 1
},
{
"date": "2022-01-07",
"count": 1
},
{
"date": "2022-01-26",
"count": 1
},
{
"date": "2022-02-07",
"count": 1
},
{
"date": "2022-02-26",
"count": 1
},
{
"date": "2022-03-08",
"count": 1
},
{
"date": "2022-06-23",
"count": 1
},
{
"date": "2022-08-01",
"count": 1
},
{
"date": "2022-12-01",
"count": 1
},
{
"date": "2023-01-26",
"count": 1
},
{
"date": "2023-01-31",
"count": 1
},
{
"date": "2023-02-11",
"count": 1
},
{
"date": "2023-02-14",
"count": 1
},
{
"date": "2023-02-17",
"count": 1
},
{
"date": "2023-03-08",
"count": 1
},
{
"date": "2023-04-07",
"count": 1
},
{
"date": "2023-04-12",
"count": 1
},
{
"date": "2023-04-18",
"count": 1
},
{
"date": "2023-04-19",
"count": 1
},
{
"date": "2023-05-11",
"count": 1
},
{
"date": "2023-05-28",
"count": 1
},
{
"date": "2023-06-04",
"count": 1
},
{
"date": "2023-06-19",
"count": 1
},
{
"date": "2023-07-12",
"count": 1
},
{
"date": "2023-07-23",
"count": 1
},
{
"date": "2023-07-26",
"count": 2
},
{
"date": "2023-08-14",
"count": 1
},
{
"date": "2023-08-28",
"count": 1
},
{
"date": "2023-09-08",
"count": 1
},
{
"date": "2023-09-09",
"count": 1
},
{
"date": "2023-09-22",
"count": 1
},
{
"date": "2023-09-23",
"count": 1
},
{
"date": "2023-09-29",
"count": 1
},
{
"date": "2023-10-08",
"count": 1
},
{
"date": "2023-10-15",
"count": 1
},
{
"date": "2023-10-18",
"count": 1
},
{
"date": "2023-10-21",
"count": 1
},
{
"date": "2023-10-26",
"count": 2
},
{
"date": "2023-11-24",
"count": 1
},
{
"date": "2023-12-08",
"count": 1
},
{
"date": "2023-12-10",
"count": 1
},
{
"date": "2024-01-07",
"count": 1
},
{
"date": "2024-02-07",
"count": 1
},
{
"date": "2024-02-14",
"count": 1
},
{
"date": "2024-02-19",
"count": 1
},
{
"date": "2024-02-20",
"count": 1
},
{
"date": "2024-03-01",
"count": 1
},
{
"date": "2024-03-02",
"count": 1
},
{
"date": "2024-03-26",
"count": 1
},
{
"date": "2024-05-02",
"count": 1
},
{
"date": "2024-05-19",
"count": 1
},
{
"date": "2024-08-31",
"count": 1
},
{
"date": "2024-09-01",
"count": 1
},
{
"date": "2024-09-05",
"count": 1
},
{
"date": "2024-09-18",
"count": 1
},
{
"date": "2024-11-12",
"count": 1
},
{
"date": "2024-11-30",
"count": 1
},
{
"date": "2025-01-03",
"count": 1
},
{
"date": "2025-01-16",
"count": 1
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-10",
"count": 1
},
{
"date": "2025-03-31",
"count": 1
},
{
"date": "2025-04-23",
"count": 1
},
{
"date": "2025-05-13",
"count": 1
},
{
"date": "2025-07-06",
"count": 1
},
{
"date": "2025-07-28",
"count": 1
},
{
"date": "2025-07-31",
"count": 1
},
{
"date": "2025-08-12",
"count": 1
},
{
"date": "2025-11-05",
"count": 1
},
{
"date": "2025-11-17",
"count": 1
},
{
"date": "2026-01-05",
"count": 1
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-03-12",
"count": 1
},
{
"date": "2026-03-29",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-19",
"count": 1
},
{
"date": "2026-05-16",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": true,
"collected": 133,
"total_forks": 135
},
"star_history": null,
"open_issues_and_prs": 60
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"samples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 194020,
"source_files_sampled": 267,
"oversized_source_files": 8,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 6,
"merged_prs": 231,
"open_issues": 54,
"closed_ratio": 0.879,
"closed_issues": 391,
"closed_unmerged_prs": 61
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "ximion",
"commits": 2991,
"avatar_url": "https://avatars.githubusercontent.com/u/417468?v=4"
},
{
"type": "User",
"login": "weblate",
"commits": 102,
"avatar_url": "https://avatars.githubusercontent.com/u/1607653?v=4"
},
{
"type": "User",
"login": "piotrdrag",
"commits": 80,
"avatar_url": "https://avatars.githubusercontent.com/u/139229?v=4"
},
{
"type": "User",
"login": "yurchor",
"commits": 73,
"avatar_url": "https://avatars.githubusercontent.com/u/2255859?v=4"
},
{
"type": "User",
"login": "haaninjo",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/2112909?v=4"
},
{
"type": "User",
"login": "aleixpol",
"commits": 55,
"avatar_url": "https://avatars.githubusercontent.com/u/1282478?v=4"
},
{
"type": "User",
"login": "rffontenelle",
"commits": 43,
"avatar_url": "https://avatars.githubusercontent.com/u/1571783?v=4"
},
{
"type": "User",
"login": "zerng07",
"commits": 31,
"avatar_url": "https://avatars.githubusercontent.com/u/1706450?v=4"
},
{
"type": "User",
"login": "pwithnall",
"commits": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/53172?v=4"
},
{
"type": "User",
"login": "milotype",
"commits": 27,
"avatar_url": "https://avatars.githubusercontent.com/u/43657314?v=4"
}
],
"contributors_sampled": 99,
"top_contributor_share": 0.698
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build-test.yml",
"codeql-analysis.yml",
"coverity.yml",
"label.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 40 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 1,
"reason": "dependency not pinned by hash detected -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool detected: CodeQL",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ac1b68ef692f1415784091c7a01bfe66f85b09f4",
"ran_at": "2026-07-25T18:29:44Z",
"aggregate_score": 6.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T18:57:56Z",
"oldest_open_prs": [
{
"number": 492,
"created_at": "2023-04-21T15:49:05Z",
"last_comment_at": "2023-08-08T08:16:12Z",
"last_comment_author": "ximion"
},
{
"number": 497,
"created_at": "2023-05-28T20:38:39Z",
"last_comment_at": "2023-08-02T16:21:29Z",
"last_comment_author": "ximion"
},
{
"number": 503,
"created_at": "2023-06-19T19:04:35Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 539,
"created_at": "2023-10-18T07:24:58Z",
"last_comment_at": "2024-02-28T08:37:06Z",
"last_comment_author": "JakobDev"
},
{
"number": 701,
"created_at": "2025-03-09T18:14:53Z",
"last_comment_at": "2025-04-14T00:14:52Z",
"last_comment_author": "ximion"
},
{
"number": 749,
"created_at": "2026-05-18T11:17:54Z",
"last_comment_at": "2026-05-18T14:02:02Z",
"last_comment_author": "razzeee"
}
],
"last_merged_pr_at": "2026-07-20T20:26:55Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 157,
"created_at": "2017-12-22T15:12:05Z",
"last_comment_at": "2017-12-29T00:50:01Z",
"last_comment_author": "ximion"
},
{
"number": 168,
"created_at": "2018-01-20T23:07:28Z",
"last_comment_at": "2024-05-15T10:10:03Z",
"last_comment_author": "n8willis"
},
{
"number": 231,
"created_at": "2019-04-24T18:38:59Z",
"last_comment_at": "2025-12-18T00:23:11Z",
"last_comment_author": "ximion"
},
{
"number": 280,
"created_at": "2020-07-04T13:47:14Z",
"last_comment_at": "2023-11-04T02:09:04Z",
"last_comment_author": "torkus"
},
{
"number": 314,
"created_at": "2021-05-06T23:44:34Z",
"last_comment_at": "2022-04-10T01:33:40Z",
"last_comment_author": "ximion"
},
{
"number": 316,
"created_at": "2021-05-19T21:13:23Z",
"last_comment_at": "2021-11-10T14:31:30Z",
"last_comment_author": "elsiehupp"
},
{
"number": 344,
"created_at": "2021-08-10T08:27:20Z",
"last_comment_at": "2021-09-27T22:05:36Z",
"last_comment_author": "sophie-h"
},
{
"number": 358,
"created_at": "2021-09-22T22:34:09Z",
"last_comment_at": "2021-09-27T02:49:33Z",
"last_comment_author": "ximion"
},
{
"number": 368,
"created_at": "2021-12-09T14:26:50Z",
"last_comment_at": "2022-02-21T11:22:26Z",
"last_comment_author": "ximion"
},
{
"number": 388,
"created_at": "2022-03-10T09:42:08Z",
"last_comment_at": "2022-04-08T15:08:21Z",
"last_comment_author": "ximion"
},
{
"number": 400,
"created_at": "2022-05-13T13:43:33Z",
"last_comment_at": "2023-02-23T22:50:42Z",
"last_comment_author": "bertob"
},
{
"number": 412,
"created_at": "2022-06-22T06:17:46Z",
"last_comment_at": "2025-02-21T21:56:49Z",
"last_comment_author": "JakobDev"
},
{
"number": 413,
"created_at": "2022-06-22T09:58:43Z",
"last_comment_at": "2023-10-04T23:52:44Z",
"last_comment_author": "ximion"
},
{
"number": 427,
"created_at": "2022-08-23T07:42:23Z",
"last_comment_at": "2024-05-24T18:27:03Z",
"last_comment_author": "ferdnyc"
},
{
"number": 429,
"created_at": "2022-08-24T22:53:50Z",
"last_comment_at": "2022-08-25T16:18:21Z",
"last_comment_author": "ximion"
},
{
"number": 439,
"created_at": "2022-10-21T22:00:03Z",
"last_comment_at": "2022-10-22T20:32:14Z",
"last_comment_author": "van-de-bugger"
},
{
"number": 493,
"created_at": "2023-04-23T07:27:14Z",
"last_comment_at": "2023-04-24T16:05:27Z",
"last_comment_author": "darkdragon-001"
},
{
"number": 502,
"created_at": "2023-06-18T12:29:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 512,
"created_at": "2023-08-11T17:02:23Z",
"last_comment_at": "2024-03-13T15:18:02Z",
"last_comment_author": "razzeee"
},
{
"number": 524,
"created_at": "2023-09-08T04:23:30Z",
"last_comment_at": "2023-10-14T03:15:45Z",
"last_comment_author": "ximion"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/ximion/appstream",
"host": "github.com",
"name": "appstream",
"owner": "ximion"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"security": 67,
"vitality": 87,
"community": 64,
"governance": 56,
"engineering": 77
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 87,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"commits_last_year": 272,
"human_commit_share": 0.98,
"days_since_last_push": 0,
"active_weeks_last_year": 41
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "41/52 weeks with commits",
"points": 28.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 41
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "272 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 272
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"releases_count": 39,
"latest_release_tag": "v1.1.5",
"releases_from_tags": true,
"days_since_latest_release": 1,
"mean_days_between_releases": 91.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "39 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 39
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~91.2 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 91.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 64,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"forks": 135,
"stars": 273,
"watchers": 13,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "273 stars",
"points": 39.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 273
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "135 forks",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 135
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "13 watchers",
"points": 6,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 13
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (LGPL-2.1)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "LGPL-2.1"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 56,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 99,
"top_contributor_share": 0.698
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 70% of commits",
"points": 6.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 70
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "99 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 99
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 40 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"merged_prs": 231,
"open_issues": 54,
"closed_issues": 391,
"issue_closed_ratio": 0.879,
"closed_unmerged_prs": 61
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "88% of issues closed",
"points": 41.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 88
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "231/292 decided PRs merged",
"points": 30.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 231,
"decided": 292
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"followers": 147,
"owner_type": "User",
"is_verified": null,
"owner_login": "ximion",
"public_repos": 109,
"account_age_days": 5780
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "147 followers of ximion",
"points": 15.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 147,
"login": "ximion"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "109 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 109
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 77,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"appstream",
"appstream-specification",
"freedesktop",
"metadata",
"metainfo"
],
"has_wiki": false,
"homepage": "http://www.freedesktop.org/wiki/Distributions/AppStream/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "http://www.freedesktop.org/wiki/Distributions/AppStream/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "5 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 5
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 67,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 67,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 14,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 4,
"scorecard_aggregate": 6.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 40 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 0.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected: CodeQL",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 13
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 52,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.898,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "88 of 98 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 88,
"sampled": 98
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.03,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.02
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "3 of the last 100 commits agent-authored or agent-credited",
"points": 6,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "2 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 194020,
"source_files_sampled": 267,
"oversized_source_files": 8
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "8/267 source files over 60KB",
"points": 53.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 267,
"oversized": 8
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"samples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-25T18:30:01.051286Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/x/ximion/appstream.svg",
"full_name": "ximion/appstream",
"license_state": "standard",
"license_spdx": "LGPL-2.1"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.