xiph/theora holds a health index of 49 out of 100, placing it in the At risk band. It scores highest on Engineering Quality (72/100) and lowest on Vitality (36/100). It was last updated 73 days ago. A single contributor accounts for most of its recent work.
49
overall / 100
At risk
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
49
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 79 ⇿
0Stars
79Forks
1Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 0
Each point covers 11 days.
OpenSSF Scorecard 3.9 / 10
3.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-23 19:32 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"video",
"codec",
"compression",
"theora",
"ogg",
"libtheora"
],
"is_fork": false,
"size_kb": 20007,
"has_wiki": false,
"homepage": "https://theora.org/",
"languages": {
"C": 1466413,
"M4": 40158,
"Awk": 688,
"C++": 10224,
"Perl": 8225,
"Shell": 382,
"Python": 7220,
"Assembly": 122845,
"Makefile": 24999,
"Batchfile": 1028
},
"pushed_at": "2026-05-11T03:47:15Z",
"created_at": "2015-04-14T20:48:50Z",
"owner_type": "Organization",
"updated_at": "2026-07-08T03:35:51Z",
"description": "Reference implementation of the Theora video compression format. Mirror of https://gitlab.xiph.org/xiph/theora",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "C",
"significant_languages": [
"C"
]
},
"owner": {
"blog": "https://xiph.org/",
"name": "Xiph.Org Foundation",
"type": "Organization",
"login": "xiph",
"company": null,
"location": null,
"followers": 631,
"avatar_url": "https://avatars.githubusercontent.com/u/8365509?v=4",
"created_at": "2014-08-05T17:12:54Z",
"is_verified": null,
"public_repos": 36,
"account_age_days": 4370
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2025-03-29T06:01:11Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2009-10-01T18:00:57Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2009-09-24T19:18:41Z"
}
],
"recent_commits": [
{
"oid": "28fd5ec77f0ad0e07a371cef1047828116f6bd8a",
"body": null,
"is_bot": false,
"headline": "Fix -Wshift-op-parentheses on examples",
"author_name": "Le Philousophe",
"author_login": "lephilousophe",
"committed_at": "2026-05-11T02:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faaadd9fa4a176ce31118a7b8acb3dcca5dd10b8",
"body": "ARM is not supported (for now) elsewhere than on Linux and RiscOS.",
"is_bot": false,
"headline": "Fix ARM build on Windows and iOS",
"author_name": "Le Philousophe",
"author_login": "lephilousophe",
"committed_at": "2026-05-11T02:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "224e3acb6675e363d6b4ee904f2310937fc4cc93",
"body": null,
"is_bot": false,
"headline": "Fix mingw host in CI and enable shared build",
"author_name": "Le Philousophe",
"author_login": "lephilousophe",
"committed_at": "2026-05-10T12:04:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fe242e7d7135ab49ef877b2d852dddf5c2c66fe",
"body": "With a DOS EOL, libtool fails to recognize a DEF file, adds an EXPORT\ndirective with UNIX EOL which makes a broken resulting file.\n\nThe theora.def file is not modified as its LIBRARY directive is properly\nparsed by libtool and is also used by MSVC.",
"is_bot": false,
"headline": "Fix EOL of mingw32 DEF files",
"author_name": "Le Philousophe",
"author_login": "lephilousophe",
"committed_at": "2026-05-10T12:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4810d752fb97610bab37aa432ef9bec9272fe800",
"body": null,
"is_bot": false,
"headline": "Fix exports file path",
"author_name": "Le Philousophe",
"author_login": "lephilousophe",
"committed_at": "2026-05-10T12:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ae2669a3d53fd0a564657d1253debdf77e2a241",
"body": "2.69 is much more widely available than 2.71 and works fine.",
"is_bot": false,
"headline": "autotools: relax autoconf requirement",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2026-05-01T13:40:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb822d13e5a65d3935e4c94306d2ad9ad4e483e8",
"body": "It's either not enabled and triggers an illegal instruction error or, if\nan addon is used, it's enabled but the XMM registers are not preserved\nacross context switches.\nSome later versions of NT4 are supposed to support SSE, but to keep the\ncheck simple, play it conservative.",
"is_bot": false,
"headline": "Disable SSE on Windows 95 and Windows NT4 and before",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-27T12:50:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "546da5c0f40a2b7f77aa9f60bcdec7699f2edc92",
"body": "Also store results shared across assembly blocks.",
"is_bot": false,
"headline": "Mark XMM registers as clobbered",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-27T12:50:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb92ede9ba5162d0b8134cd1ff57751df6f3dbe6",
"body": "Check various boundaries while reading hdrl.",
"is_bot": false,
"headline": "Fix CVE-2026-5673",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-26T20:12:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "014bc312d05241ff2d06fd52ee7cbbec3768bfd6",
"body": "Only a succesful test can get used and only the most powerful is\nretained.",
"is_bot": false,
"headline": "Fix ARM ASFLAGS probing",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-11T20:53:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a59533f68a2a0ec4e2debfa9c6059660c8e5ecd1",
"body": null,
"is_bot": false,
"headline": "Fix typo",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-11T20:53:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c74576b94599e8d01547eff725dc75240874ad5c",
"body": "This fixes build on LLVM based assembler (Android).",
"is_bot": false,
"headline": "Fix ARM assembly code to conform to ARM specification",
"author_name": "Le Philousophe",
"author_login": null,
"committed_at": "2026-04-11T20:53:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edfba372beb02ff70a1e2797d8cf561c242d0e0b",
"body": "The declarations used function argument identifiers prefixed with double\nunderscore.\nIdentifiers with double underscore prefix are reserved identifiers.\n\nThis breaks in practice on MinGW-w64, where __argc and __argv are macros.",
"is_bot": false,
"headline": "Fix getopt declarations.",
"author_name": "Jörn Heusipp",
"author_login": "manxorist",
"committed_at": "2026-01-05T17:05:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7ed484377fc7c3dd2b3d9b65fc6e405428c6eca",
"body": "rint is part of C99 and defined by modern MinGW-w64.\nThe definition conflicts with the standard-provided definition.\nRename rint to th_rint.",
"is_bot": false,
"headline": "Fix rint declaration.",
"author_name": "Jörn Heusipp",
"author_login": "manxorist",
"committed_at": "2025-11-07T15:26:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23161c4a63fd9f9d09b9e972f95def2d56c777af",
"body": "since they are the default and suggested modes",
"is_bot": false,
"headline": "encoder_example: list -a and -v before other modes",
"author_name": "Fabio Pedretti",
"author_login": "FabioPedretti",
"committed_at": "2025-07-04T01:07:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b167cb4a3e3e2d3239d71f0ca2cbc25af4f2183c",
"body": "These were forgotten when arm support were imporoved.\n\nFixes #2338",
"is_bot": false,
"headline": "Added missing arm related files to tarball.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-04-03T03:28:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa233f712c8d79419c52befc24040225760052f5",
"body": "Export the .tar.xz and .zip source packages as well as the\nbase tar.gz version. Some downstream projects (VLC) expect\nthe tar.xz version and this makes it easier to reference.\n\nAlso log the checksums of the source packages generated\nby `make distcheck` for later comparison.",
"is_bot": false,
"headline": "gitlab-ci: export all source package versions",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2025-04-02T03:35:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e4808736e9c181b971306cc3f05df9e61354004",
"body": "Increased libtool TH*_LIB_CURRENT and thus minor version of SONAME as\nimplementation of the library changed.\n\nAdjusted THDEC_LIB_REVISION which was forgotten in the 1.2.0beta1\nrelease.\n\nFixes #2319.\nFixes #17 on github.",
"is_bot": false,
"headline": "Final release 1.2.0.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-29T06:01:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21d1f8132ca8596d047888edb5a922f78bf369f4",
"body": "This is already being done for GCC et al.",
"is_bot": false,
"headline": "examples: disable clang op precedence warnings",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2025-03-27T20:04:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce728a87f205346409af6c6304912f220b8b763f",
"body": null,
"is_bot": false,
"headline": "AUTHORS: add tmatth",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2025-03-27T20:04:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cffa6f5c30fd6db7bd2ab2bebdbb2461d4b0b9bb",
"body": "…mple.",
"is_bot": false,
"headline": "Mention aoss and alsa-oss as alternatives to fix audio for player_exa…",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-27T18:43:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35e103dcab972af3f21580193402a13b8c35f9c9",
"body": "\"This solves compilation issues from the future.\" - the original commit message, however\nsince that was 10 years ago the \"future\" has most likely passed.\n\nSigned-off-by: Tristan Matthews <tmatth@videolan.org>",
"is_bot": false,
"headline": "configure: fix broken compiler differentiation",
"author_name": "Felix Paul Kühne",
"author_login": "fkuehne",
"committed_at": "2025-03-26T13:31:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3ee0f56702afb2b8c688ed583aabfbb921919c0",
"body": "Signed-off-by: Petter Reinholdtsen <pere@hungry.com>",
"is_bot": false,
"headline": "Fix repetition in help output of encoder_example.c.",
"author_name": "Fabio Pedretti",
"author_login": "FabioPedretti",
"committed_at": "2025-03-24T03:29:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cec37c4d2ae433e25f6680e2b5a1e2aa7fdad87",
"body": "Signed-off-by: Petter Reinholdtsen <pere@hungry.com>",
"is_bot": false,
"headline": "Fixed encoder_example.c help options alignment.",
"author_name": "Fabio Pedretti",
"author_login": "FabioPedretti",
"committed_at": "2025-03-24T03:28:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c033d7cc83394d37c8657f2fd46e513631f005c",
"body": "Updated the most used links and a few more after manually checking the\nhttps variant of the link still lead to a web page. Some URLs no longer\nwork, these were not changed to https. Also changed xiph.org->www.xiph.org.\n\nDid not change anything in the draft RFCs.\n\nFixes #2332",
"is_bot": false,
"headline": "Switched links to https where possible and standardized links a bit.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-22T07:58:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b629fcef9b1f2c8fcd1ba0649ef2eb3529de7f99",
"body": "Patch from fabio, wrapped to fit within 80 char lines, and added\nexit code 1 to error situations.\n\nFixes #2336",
"is_bot": false,
"headline": "Improved and corrected encoder_example_ffmpeg example.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-21T20:46:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fe11a33574d977fcacd612d26a64aa3d4cca56b",
"body": "Leftover from 10b3ce94133f63f6f3606e7e0eb82f1e1a79ec0c.\n\nFixes #2335",
"is_bot": false,
"headline": "Use ogg version subst variable in theoraenc-uninstalled.pc.in.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-21T06:14:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4de72823f7680b256abc0486f2c737427ba4fd78",
"body": null,
"is_bot": false,
"headline": "Fix typos using codespell",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2025-03-20T16:17:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0492317237b00e654fb9ace4d14ae0e08faf9813",
"body": null,
"is_bot": false,
"headline": "Got github CI working on both Ubuntu and MacOSX.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-19T19:32:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1342671f78ac1838aa177cbafa7dc41f120159b7",
"body": null,
"is_bot": false,
"headline": "Tird try at github CI setup.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-19T19:05:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b463a2ee20ce213261077ceca5e07349e57935c",
"body": null,
"is_bot": false,
"headline": "Second try at github CI setup.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-19T19:02:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d78fe6e249dd789b5c4e042b794030938d184cf8",
"body": "This allow us to see how the MacOSX build is working.",
"is_bot": false,
"headline": "Added draft CI setup for github, including macosx check.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-19T17:40:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd4c6b22956324862b9a47ee249195997b7048bf",
"body": "This better reflect the set of tools involved.",
"is_bot": false,
"headline": "Renamed CI template and prefix from autoconf to autotools.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-19T17:35:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f4aba13fea361f0873b81d38ed2daa56f024912",
"body": "This avoid calling malloc(0) expecting a non-NULL pointer returned,\nand make the code in oc_comment_unpack() not depend on non POSIX specified\nbehaviour.\n\nEnsured comment_lengths and user_comments are NULL if there are no comments.\n\nThanks to Eric Lasota for noticing.\n\nFixes #2304",
"is_bot": false,
"headline": "Dropped to allocate memory for comments when there are none.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-17T19:12:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10b3ce94133f63f6f3606e7e0eb82f1e1a79ec0c",
"body": "Document the need for ogg 1.3.4 and use the 1.2.0 version number\nmore places. Move required ogg version to configure.ac substitution\nvariable.\n\nFixes #2328",
"is_bot": false,
"headline": "Updated requirement information in README, .pc and spec files.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-16T17:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61ab2119260aa15e87ae72f9f766019ae789d6d0",
"body": "Based on script posted to https://bugs.debian.org/516343 in 2009\nby Robert Millan.\n\nFixes #1601",
"is_bot": false,
"headline": "Added example wrapper script encoder_example_ffmpeg.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-16T17:31:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad29a421144e2d6a7a25542619c3e2c216dd9b8c",
"body": "Fixes #2331",
"is_bot": false,
"headline": "Corrected and moved codename information to README.md.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-16T17:10:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc8bfe5ad051de5c402b9817e8b04404d65a98f3",
"body": null,
"is_bot": false,
"headline": "Added codename to 1.1 release Thunar in CHANGES.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-16T08:16:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69cf61ef163666f53a48374d3e8df7225913194d",
"body": "Increased libtool TH*_LIB_CURRENT and thus minor version of SONAME as\nAPI of a few methods changes by adding 'const' to some of the char *\narguments in codec.h.\n\nA 1.2.0 release is planned in two weeks.\n\nRelated to #2319.",
"is_bot": false,
"headline": "New release 1.2.0beta1.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-15T06:24:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcc5d21e664c0a20654c357a1515985239486f58",
"body": "CI currently does not thoroughly test encoding and decoding (except for\nencoding zeroed dummy frames).\nTesting --disable-asm is still useful because it ensures that the code compiles\non platforms where there are no ASM optimizations and the generic C code paths\nare used.",
"is_bot": false,
"headline": "Add CI for --disable-asm.",
"author_name": "Jörn Heusipp",
"author_login": "manxorist",
"committed_at": "2025-03-14T09:50:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5ccaa141c9b01371e1a96c9b5782aad97ac71b8",
"body": "Adjust clang CI run to report warning about reserved identifiers.",
"is_bot": false,
"headline": "Renamed header file identifiers using C/C++ reserved name structure.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-10T22:03:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5665f86b8fd8345bb09469990e79221562ac204b",
"body": "A crash was discovered using input fuzzying, in th_decode_ceaderin()\nwhere the len value in the oc_fuff_tree_unpack() can end up as -1.\nAdded a check to ensure this do not happen.\n\nBased on feedback from Timothy B. Terriberry.\n\nThe issue was discovered using gcc sanitazion, which reported the follow\n[…]\nn.h:58\n #9 0x7cc9a5e29e3f in __libc_start_main_impl ../csu/libc-start.c:392\n #10 0x5d47100f9964 in _start (/home/uos/libtheora-18570/libtheora-18570/poc1+0x83964)\n\nFixes github pull request #19.",
"is_bot": false,
"headline": "Avoid negative bit shift operatoin in huffdec.c (CVE-2024-56431).",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-10T21:45:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "13c109148a9ea55c9d8d109e1d22a9beb8befe79",
"body": "Do not build examples, as it require libvorbis, and do not build\ndocumentation as it require a host of programs not available\nduring cross building.",
"is_bot": false,
"headline": "Added mingw CI build.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-10T17:21:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a8228a6f77bf74440db1b7b4fde7225bbaec8c3",
"body": "During video playout using player_example with gcc sanitaztions\nenabled, new bit shifting of negative values were discovered.\nReplaced this with multiplication too.",
"is_bot": false,
"headline": "Avoided bit shift of negative values in OC_MV() macro.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-10T15:45:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec642ecf6d94f11d5eb05ab1fb7a9728c9a89cae",
"body": "Leftover changes from a6766c94721bc55e8e56fb0d941ecfe2d27c3d17.\n\nUse multiplication instead, allowing the compiler to optimize to\nbitshifts if it believe it to be safe.\n\nPartly solves github issue #18.",
"is_bot": false,
"headline": "Replaced more possible bit shifting into signed bit of stride values.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T21:54:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dc3bd8a0042e9bc71477ddc9ca9cb3785c342ca",
"body": null,
"is_bot": false,
"headline": "Print config.log from CI if configure fail.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T21:01:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "996200e50973a517580218c188a8f4479187f41f",
"body": "These have not been updated since before the code was migrated to\ngit, and both no longer make sense and are not correct.",
"is_bot": false,
"headline": "Removed obsolete $ID / last mod lines from source.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T18:48:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c847ef09b7ac28fbf79134d06c9c99360fbd92a",
"body": null,
"is_bot": false,
"headline": "Updated copyright year for source files touched this year.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T18:46:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b5aee3f93c5f620a7f5b1777dbc6cf33b74e7ca",
"body": "The 'int x=x' style statement do not make sense and cause problems with\nsome compilers. Replace it with more sensible initializers to ensure\nthe value have a well known starting point. Using initializers\nproposed by Timothy B. Terriberry in !25.\n\nAdded -Werror=uninitialized -Winit-self to default GCC build to ensure\nthis style of statement do not sneak into the code again.\n\nFixes #2317",
"is_bot": false,
"headline": "Dropped self assignment when initialising variables in tokenize.c.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T18:37:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b51ac556dc133d17aab450497e28c77096264dee",
"body": "The security issue CVE-2024-56431 was discovered using GCC address\nsanitaztion. Make it easier to run this check, and run it in\ngitlab CI.\n\nBased on a comment in !28.",
"is_bot": false,
"headline": "Added configure option --enable-gcc-sanitizeers.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T18:13:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0669f7342598c152d88662c7b7b55fcf15cc8de6",
"body": "Ran 'cp Doxygen.in Doxygen; doxygen -u; cp Doxygen Doxygen.in' and\nremoved DOT_FONTNAME reference to non-free font.",
"is_bot": false,
"headline": "Updated doxygen setup to avoid warnings about obsolete entries.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T17:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cb634ec2c1a45e64f4fd56c78a572fc49593d30",
"body": "Check if argument is null before using this approach, and just return\nzero when the value to do bit count on is zero.\n\nFixes a issue discovered by --enable-gcc-sanitizers in !31:\n\n ../../lib/encode.c:1384:49: runtime error: passing zero to clz(),\n which is not a valid argument\n #0 0x7f0af5dae\n[…]\nmain.h:58\n #5 0x7f0af51d3304 in __libc_start_main_impl ../csu/libc-start.c:360\n #6 0x55fd4beb1300 in _start\n (/home/user/libtheora/build/tests/.libs/granulepos_theoraenc+0x2300)\n\nFixes #2323",
"is_bot": false,
"headline": "Avoided calling __Builting_clz(0) with undefined behaviuor.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T17:50:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62b266ae4e2465ab24b5ed4761044e2af3015fee",
"body": "The last iteration of the loop execute 1<<63, which would push the\nresult into the signed bit of a signed 64 bit type, and this\nmove into currently undefined behaviour with C99. Avoid the\nissue by making the operation work on unsigned 64 bit type instead.\n\nThis require libogg version to 1.3.4, raise autotools dependency check\nto look for this.\n\nPartly solves github issue #18.",
"is_bot": false,
"headline": "Made mask unsigned to avoid shifting into sign bit.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T17:36:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15acdb8e79fbd8e0456ffe913c207deb39443a88",
"body": "Use multiplication instead, allowing the compiler to optimize to\nbitshifts if it believe it to be safe.\n\nFixes a few issues discovered by --enable-gcc-sanitize-address in !31.",
"is_bot": false,
"headline": "Avoided undefined bit shifting of signed value.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T16:13:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6766c94721bc55e8e56fb0d941ecfe2d27c3d17",
"body": "Use multiplication instead, allowing the compiler to optimize to\nbitshifts if it believe it to be safe.\n\nPartly solves github issue #18.",
"is_bot": false,
"headline": "Replaced possible bit shifting into signed bit of stride values.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T15:47:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4549f5467e1fc62f9d9d386592e1f5859accf930",
"body": "It is undefined what left-shifting a negative number should do, and the\ncompiler do not like trying to shift the -64 value 57 bits to the left.\n\nChanged the definition of OC_Q57() to left shift one bit and\nuse multiplication, to change the operatoin to a well defined one.\nPatch from Timothy B_ Terri\n[…]\n ^~~~~~~~~~~\n> ../../lib/mathops.h:134:38: note: expanded from macro 'OC_Q57'\n> #define OC_Q57(_v) ((ogg_int64_t)(_v)<<57)\n> ~~~~~~~~~~~~~~~~~^\n\nMR !23 fixes #2321",
"is_bot": false,
"headline": "Avoid undefined shifting of negative number in rate.c.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T15:45:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8616710dc60879500ae08aba00c417658f9bb209",
"body": "This will make it easier for prospective users and developers to\nlocate the mailman lists.",
"is_bot": false,
"headline": "Added links in README.md to mailing lists.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T15:28:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "475e32d34c8cab913755d0d0185636290d4c583e",
"body": "…updated when releasing.",
"is_bot": false,
"headline": "Make it more obvious in configure.as that libtool numbers need to be …",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-09T12:01:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a768e3568feccd4953dc54886d05c4c2f710e561",
"body": "…e _mag.\n\nInstead of shifting the negative number, shift one bit and multiply\nit with the negative number.\n\nFixes the following clang message:\n../../lib/decode.c:195:3: warning: shifting a negative signed value is undefined [-Wshift-negative-value]\n OC_DCT_CW_PACK( 0,10, -1,0),\n ^~~~~~~~~~~~~~~~~~\n[…]\n]\n OC_DCT_CW_PACK( 0, 0,-12,0),\n ^~~~~~~~~~~~~~~~~~~~~~~~~~~\n../../lib/decode.c:150:16: note: expanded from macro 'OC_DCT_CW_PACK'\n (_mag)-(_flip)<<OC_DCT_CW_MAG_SHIFT)\n ~~~~~~~~~~~~~~^\n\nFixes #2322",
"is_bot": false,
"headline": "Adjusted OC_DCT_CW_PACK() for well defined C99 behaviour with negativ…",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-08T23:19:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f7c9abd4d6ebb8388dd07d24099c3b8afec62481",
"body": "Switching type of cd from unsigned to int make sure the difference\npassed to abs() wil be a signed value.\n\nAs dc is calculated to at most ((8 * 8 * (2^8-1)) + 32) / 64, ie 255\nand the highest value it can hold before it is shifted 6 bit positions\nto the right is (8 * 8 * (2^8-1)) + 32) ie. 16352, it\n[…]\n ^\n../../../lib/encfrag.c:104:26: note: remove the call to 'abs' since unsigned values cannot be negative\n for(j=0;j<8;j++)sad+=abs(_src[j]-dc);\n ^~~",
"is_bot": false,
"headline": "Make sure difference in encfrag.c is signed when taking absolute value.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-08T22:26:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4b90527c95368382c8675f6cb1c2a9a42c8a2608",
"body": "This get rid of the following clang warning:\n\nhuffdec.c:439:7: warning: variable 'total' set but not used [-Wunused-but-set-variable]\n int total;\n ^",
"is_bot": false,
"headline": "Stopped calculated unused total in oc_huff_tree_size().",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-08T20:48:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "877ac81181e93a61dc0f1d5fd02dbf7e4cf6fa4f",
"body": "The OC_IDCT_CONSTS array in x86/sse2idct.c is 64 elements long, so\nnot use trying to pretend it is 128 elements long.\n\nThis avoid the following copmiler message:\n\nIn function 'oc_idct8x8_slow_mmx',\n inlined from 'oc_idct8x8_mmx' at ../../lib/x86/mmxidct.c:555:8:\n../../lib/x86/mmxidct.c:290:3: war\n[…]\ne: object 'OC_IDCT_CONSTS' of size 128\n 26 | const unsigned short __attribute__((aligned(16),used)) OC_IDCT_CONSTS[64]={\n | ^~~~~~~~~~~~~~",
"is_bot": false,
"headline": "Adjusted macros to avoid working outside OC_IDCT_CONSTS array.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-08T09:35:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bb3e5cad5e15e18d9876499a3b6fdfb2d31d701d",
"body": "The arrays are 5 elements long, but some intermittent methods claim it\nwas just four elements.",
"is_bot": false,
"headline": "Use correct array length in method definitions in analyze.c.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T22:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2fe318c48125842811d43b5f486541ed5ef9a64",
"body": "Made sure the implementation matches the prototype.",
"is_bot": false,
"headline": "Corrected method definition for oc_enc_frag_sub_128_c().",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T22:19:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cf9371ec5f272851fee8b22f64c121e494edd5a",
"body": "Rewrites 2fb974cf60823b7692bf44f229020bb6b588151f.",
"is_bot": false,
"headline": "Corrected documentation LaTex activation of UTF-8 encoding.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T21:24:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f306a2353818cd514e34b2eadb29430361435ac2",
"body": "This will avoid running valgrind on bash and instead validate the\ntest programs themselves.",
"is_bot": false,
"headline": "Switched valgrind run to use LOG_COMPILER and fail on valgrind errors.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T20:57:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fb974cf60823b7692bf44f229020bb6b588151f",
"body": "…rrors",
"is_bot": false,
"headline": "Add support for the \\texttrademark character to avoid utf8 encoding e…",
"author_name": "Billae",
"author_login": null,
"committed_at": "2025-03-07T20:18:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56615e2355c17919400285be408eecbb59b34aa4",
"body": "This avoid a crash on bogus input, just exit with a message instead.\n\nFixes #2305",
"is_bot": false,
"headline": "Improve encoder example to reject audio without any channels.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T18:36:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01e16d5d3ddd626bcfc7d480603d0a6bebb9bf14",
"body": "Using ogg_uint32_t and uint8_t instead.\n\nGet rid of the following compiler message:\n\n../../examples/tiff2theora.c:283:1: warning: ‘uint32’ is deprecated [-Wdeprecated-declarations]\n 283 | rgb_to_yuv(uint32 *raster,\n | ^~~~~~~~~~\n../../examples/tiff2theora.c: In function ‘rgb_to_yuv’:\n../../exa\n[…]\n | uint32 *raster;\n | ^~~~~~\n../../examples/tiff2theora.c:404:3: warning: ‘uint32’ is deprecated [-Wdeprecated-declarations]\n 404 | raster = malloc(pixels*sizeof(uint32));\n | ^~~~~~",
"is_bot": false,
"headline": "Replaced obsolete uint32 and uint8 with more standard types in example.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T17:54:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "794bf8c64c549642156563479a6e4c6cb9a39fa6",
"body": "The ftime method has been removed from POSIX and is depricated on Linux.\nclock_gettime() work better on Linux, but is not available on Windows,\nso fall back to ftime() if autotools/scons fail to detect clock_gettime().\n\nBased on proposal in\nhttps://gitlab.xiph.org/xiph/opusfile/-/merge_requests/9.\n\n\n[…]\n | ftime(&after);\n | ^~~~~\n/usr/include/x86_64-linux-gnu/sys/timeb.h:29:12: note: declared here\n 29 | extern int ftime (struct timeb *__timebuf)\n | ^~~~~",
"is_bot": false,
"headline": "Rewrote dump_video example to prefer clock_gettime() over ftime()",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T17:50:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "46df56a55afc5452e1e6dcdb68daa55ebd803907",
"body": "The header used signed char _bf[256], make sure the method uses the\nsame. Adjust pointer arithmetic to use array notation to make operation\nexplicit.\n\nAvoid the following compiler message:\n\n../../lib/state.c:1056:15: warning: argument 2 of type 'signed char *' declared as a pointer [-Warray-paramet\n[…]\nate.c:20:\n../../lib/state.h:526:14: note: previously declared as an array 'signed char[256]'\n 526 | signed char _bv[256],int _refi,int _pli,int _fragy0,int _fragy_end);\n | ~~~~~~~~~~~~^~~~~~~~",
"is_bot": false,
"headline": "Use consistent declaration of oc_state_loop_filter_frag_rows_c().",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T17:17:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "47388cd816794933d276987dee0a73348911acf5",
"body": "…options.",
"is_bot": false,
"headline": "Added CI tests for --disable-encode and --enable-telemetry configure …",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T17:07:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34bf876678f87614ebe24d78c037601d9e01052e",
"body": "This avoid obsolete notation.\n\nIncrease autoconf dependency to version 2.71.",
"is_bot": false,
"headline": "Updated autotools setup to avoid warnings from autogen.sh.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T16:39:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14045376ee6897f20f6bb9815f246172da748e50",
"body": "Added info.c to libtheoraenc source and dropped library dependency on libtheoradec.\n\nAddresses issue reported in https://bugs.debian.org/923940 about some symbols being unresolved.",
"is_bot": false,
"headline": "Made sure libtheoraenc do not need libtheoradec.",
"author_name": "petterreinholdtsen",
"author_login": "petterreinholdtsen",
"committed_at": "2025-03-07T16:19:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3446dd669309655ab30af91660a9adb16793c019",
"body": "…build.",
"is_bot": false,
"headline": "Updated gitlab CI run to newer gcc/debian and check clang and subdir …",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T15:40:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "070b5c400b3a384c71cace537f945cad9b02bf52",
"body": "Both POSIX, the Linux documentation and UNIX Network Programming volume 1\nby Stephens state that NULL is accepted.\n\nThis avoid the following compiler message:\n\n../../examples/player_example.c: In function ‘main’:\n../../examples/player_example.c:839:22: warning: passing argument 2 to ‘restrict’-quali\n[…]\n: passing argument 2 to ‘restrict’-qualified parameter aliases with argument 4 [-Werror=restrict]\n 843 | select(n,&empty,&writefs,&empty,NULL);\n | ^~~~~~ ~~~~~~",
"is_bot": false,
"headline": "Dropped passing dummy variable to select() in example, use NULL instead.",
"author_name": "Petter Reinholdtsen",
"author_login": null,
"committed_at": "2025-03-07T15:26:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7180717276af1ebc7da15c83162d6c5d6203aabf",
"body": "Apparently this still has users, so test it, rather than\nremoving it. Verify we can build and clean up without error.",
"is_bot": false,
"headline": "gitlab-ci: Add scons build.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-10-27T16:17:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5a83d0a24720ef1136616c59275c9d32aabfeb7",
"body": "Add a build description for gitlab's continuous integration build\nand test runners. This gives us ongoing converage on commmits\nand merge requests in the upstream repository.\n\nBased on the gcc:9 image we currently use for most projects.\nIt already includes make and autotools, but we need to install\n\n[…]\njob at the test stage clears all the\ngenerated artefacts, which means we lose our configure script\nand makefiles. Therefore isn't more efficient to just do the\ntests as extra steps in the build stage.",
"is_bot": false,
"headline": "Add a gitlab ci configuration.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-10-27T16:13:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1790452acdff555b5ac5ba880a868fd44a417521",
"body": null,
"is_bot": false,
"headline": "build: fix make distcheck target",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2020-10-24T16:02:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f38d062e17cf90198c0e5db98379b01624821e4",
"body": "GStreamer's \"theoradec\" element always calls th_decode_ctl() for all telemetry\noptions, passing 0 if they are not enabled. This results in our creating a\nCairo buffer and performing YUV/RGB conversion, even if all telemetry is\ndisabled, which is very slow and can cause noticeable lag during playback.",
"is_bot": false,
"headline": "Avoid creating a Cairo buffer if all telemetry options are set to 0.",
"author_name": "Zebediah Figura",
"author_login": null,
"committed_at": "2020-10-22T15:49:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f98989ad7c3745d6cc4d24666e64046ff4a3f745",
"body": "Align indents to two spaces for cosmetic uniformity.",
"is_bot": false,
"headline": "scons: Fix indent.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-06-18T18:27:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94e68ccbc5d896ab728e2550f92c8ffe1b636204",
"body": "Signed-off-by: Ralph Giles <giles@thaumas.net>",
"is_bot": false,
"headline": "Use Python 3 compatible print function in SConstruct",
"author_name": "Jan Niklas Hasse",
"author_login": "jhasse",
"committed_at": "2020-06-18T18:26:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31e885eac7c23d2f312f49cd5138c0175008e2c9",
"body": "Signed-off-by: Ralph Giles <giles@thaumas.net>",
"is_bot": false,
"headline": "Fix warning logical-op-parentheses",
"author_name": "Jan Niklas Hasse",
"author_login": "jhasse",
"committed_at": "2020-02-25T17:10:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f370e39e08f655ed5ca4de5d2ab4e4b7aafea795",
"body": "From GCC documentation (for GCC 5 and above):\n- ‘+’ means that this operand is both read and written by the instruction.\n- Only read-only operands can use ‘%’.\n\nThus, ‘+’ and ‘%’ cannot be used at the same time.\n\nSigned-off-by: Timothy B. Terriberry <tterribe@xiph.org>\nSigned-off-by: Ralph Giles <giles@thaumas.net>",
"is_bot": false,
"headline": "Remove wrong asm constraint modifier",
"author_name": "Sebastian Buchwald",
"author_login": "UniQP",
"committed_at": "2020-02-25T17:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e0c4992b5a8440160e70f3bb1cd0e6d4f4a97c1",
"body": "Conform to local style, use shorter variable names, and add\nsome comments so the intent of the flow is more clear.\n\nAlso propagate the check to the transcoder example which\nduplicates the same code.",
"is_bot": false,
"headline": "CVE-2017-14633: Clean up and propagate the error check.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-02-25T17:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5159e325c19e3ca24c0faee10550edda7c105a95",
"body": "Abort on error from `vorbis_analysis_headerout`.\n\nSigned-off-by: Ralph Giles <giles@thaumas.net>",
"is_bot": false,
"headline": "CVE-2017-14633: Add check so we abort on too many channels",
"author_name": "Guido Günther",
"author_login": "agx",
"committed_at": "2020-02-25T17:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "065ac6494707a1e4bea491f8ed5889a2323c278f",
"body": "Add these to .gitignore so they don't clutter up version control\nstatus messages and grep output.",
"is_bot": false,
"headline": "Ignore files generated by `make check`.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-02-25T16:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03889a6e3054c1c19d10cacadcb9f6305f8e2d79",
"body": "Update links and place the description further away in time;\nthis codec isn't widely used any more.",
"is_bot": false,
"headline": "README: update text.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-02-25T16:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52d54070f03fe5ae5ce854d256ecc3d3d0ad8c0b",
"body": "This is more readable on the gitlab/github landing pages.",
"is_bot": false,
"headline": "Convert README to markdown.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2020-02-25T16:39:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4933e44ead8f5acccbc8140a2b041bed77a58614",
"body": "This will bail on files exceeding 16384x16384 (useful for fuzzing).",
"is_bot": false,
"headline": "configure: add --enable-mem-constraint option",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2020-02-14T15:21:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5d205bfe849f1b41f45b91a0b71a3bdc6cd458f",
"body": "These were left as a convenience for those on old systems.\nAutomake 1.11 is pretty widely available now.",
"is_bot": false,
"headline": "Clean up old automake options.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2017-10-23T20:11:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21f079ac45c6b064819fb0360efaa99b3d805dc3",
"body": "This is more appropriate now that we've moved the primary repository\ninto git from subversion.",
"is_bot": false,
"headline": "Rename version suffix to +git.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2017-10-23T20:11:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f506d4c3c6de738747987f588a46e9f992e5388",
"body": "Replace our more complex autogen.sh script with a copy of the\none from the Opus repository, which just calls autoreconf. That\ncommand does the same things more efficiently and is reliably\navailable now.",
"is_bot": false,
"headline": "Update autogen.sh script to just call autoreconf.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2017-10-23T20:09:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66e7937e42f1122b2a97dfc603d527869d6457eb",
"body": "This prefixes generated object file names with their relative\npath. The idea is to avoid conflicts. We don't have any, but\nautomake warns about the issue, so set the option to address that.",
"is_bot": false,
"headline": "Set subdir-objects automake option.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2017-10-23T20:08:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2df21a61c74ac804fb7933a1ae2e61a5336501a3",
"body": "Signed-off-by: Ralph Giles <giles@thaumas.net>",
"is_bot": false,
"headline": "Add CPU detection on RISC OS.",
"author_name": "Cameron Cawley",
"author_login": "ccawley2011",
"committed_at": "2017-10-23T19:32:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa5707d68c2a4338d58aa8b6afc95539ba89fecb",
"body": "Seems to only effect OS X according to Travis CI",
"is_bot": false,
"headline": "Fix build for --disable-encode",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2017-07-20T02:47:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6d6765ddc9458c1bdc9f008d2ee4c82d27fb827",
"body": null,
"is_bot": false,
"headline": "ci: libogg is needed for tests",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2017-07-19T02:28:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "678a025bc335b2a151599fe2d64c5e71511184a4",
"body": null,
"is_bot": false,
"headline": "ci: add .travis.yml based on daala's",
"author_name": "Tristan Matthews",
"author_login": "tmatth",
"committed_at": "2017-07-19T02:12:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b97ef834c491bddb0f09804b4be2ff5c49cb1a61",
"body": "The package enumeration tests in configure weren't relative to the\n ${srcdir}, and the Makefile.am rules didn't handle a destination\n directory different from the source directory.",
"is_bot": false,
"headline": "spec: Fix out of tree builds for the specification",
"author_name": "Timothy B. Terriberry",
"author_login": null,
"committed_at": "2017-06-05T15:52:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91203fdfdc0eb06cd87409d47e35d9ee5471a90f",
"body": "Global pointers are initialized to zero in C, but not in C++.\n\nAdd an explicit initializer to reduce confusion and avoid\nbugs when the example code is copied into C++ applications.\n\nBased on a patch by Alex Houghton <houghton1411@aol.com>.",
"is_bot": false,
"headline": "Initialize global pointers in examples.",
"author_name": "Ralph Giles",
"author_login": "rillian",
"committed_at": "2016-11-28T21:28:31Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 3,
"commits_last_year": 14,
"latest_release_at": "2025-03-29T06:01:11Z",
"latest_release_tag": "v1.2.0",
"releases_from_tags": true,
"days_since_last_push": 73,
"active_weeks_last_year": 5,
"days_since_latest_release": 481,
"mean_days_between_releases": 2832.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 79,
"stars": 125,
"watchers": 19,
"fork_history": {
"days": [
{
"date": "2015-05-28",
"count": 1
},
{
"date": "2015-09-20",
"count": 1
},
{
"date": "2015-09-22",
"count": 1
},
{
"date": "2015-10-03",
"count": 1
},
{
"date": "2016-01-11",
"count": 1
},
{
"date": "2016-05-11",
"count": 1
},
{
"date": "2016-05-25",
"count": 1
},
{
"date": "2016-08-24",
"count": 1
},
{
"date": "2016-11-28",
"count": 1
},
{
"date": "2017-01-07",
"count": 1
},
{
"date": "2017-02-12",
"count": 1
},
{
"date": "2017-03-10",
"count": 1
},
{
"date": "2017-06-07",
"count": 1
},
{
"date": "2017-07-19",
"count": 1
},
{
"date": "2017-09-29",
"count": 1
},
{
"date": "2017-09-30",
"count": 1
},
{
"date": "2017-10-19",
"count": 1
},
{
"date": "2017-10-31",
"count": 1
},
{
"date": "2017-12-21",
"count": 1
},
{
"date": "2018-04-13",
"count": 1
},
{
"date": "2018-05-21",
"count": 1
},
{
"date": "2018-07-20",
"count": 1
},
{
"date": "2019-01-12",
"count": 1
},
{
"date": "2019-08-15",
"count": 1
},
{
"date": "2019-11-13",
"count": 1
},
{
"date": "2020-03-23",
"count": 1
},
{
"date": "2020-04-14",
"count": 1
},
{
"date": "2020-05-01",
"count": 1
},
{
"date": "2020-08-12",
"count": 2
},
{
"date": "2020-09-08",
"count": 1
},
{
"date": "2020-09-29",
"count": 1
},
{
"date": "2020-11-04",
"count": 1
},
{
"date": "2020-11-19",
"count": 1
},
{
"date": "2021-01-28",
"count": 1
},
{
"date": "2021-05-06",
"count": 1
},
{
"date": "2021-11-22",
"count": 1
},
{
"date": "2022-02-05",
"count": 1
},
{
"date": "2022-04-16",
"count": 1
},
{
"date": "2022-04-21",
"count": 1
},
{
"date": "2022-05-19",
"count": 1
},
{
"date": "2022-09-03",
"count": 1
},
{
"date": "2022-11-24",
"count": 1
},
{
"date": "2022-12-31",
"count": 1
},
{
"date": "2023-02-13",
"count": 1
},
{
"date": "2023-03-22",
"count": 1
},
{
"date": "2023-05-13",
"count": 1
},
{
"date": "2023-09-21",
"count": 1
},
{
"date": "2023-09-29",
"count": 1
},
{
"date": "2023-10-10",
"count": 1
},
{
"date": "2024-02-16",
"count": 1
},
{
"date": "2024-05-18",
"count": 1
},
{
"date": "2024-06-21",
"count": 1
},
{
"date": "2024-08-10",
"count": 1
},
{
"date": "2024-12-23",
"count": 1
},
{
"date": "2025-01-02",
"count": 2
},
{
"date": "2025-02-06",
"count": 1
},
{
"date": "2025-02-11",
"count": 1
},
{
"date": "2025-05-05",
"count": 1
},
{
"date": "2025-05-20",
"count": 1
},
{
"date": "2025-06-05",
"count": 1
},
{
"date": "2025-09-01",
"count": 1
},
{
"date": "2025-11-13",
"count": 1
},
{
"date": "2025-12-22",
"count": 1
},
{
"date": "2026-05-22",
"count": 1
},
{
"date": "2026-06-11",
"count": 1
}
],
"complete": true,
"collected": 67,
"total_forks": 79
},
"star_history": null,
"open_issues_and_prs": 8
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"win32/xmingw32/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 107042,
"source_files_sampled": 124,
"oversized_source_files": 4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 0,
"open_issues": 6,
"closed_ratio": 0.455,
"closed_issues": 5,
"closed_unmerged_prs": 12
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "rillian",
"commits": 62,
"avatar_url": "https://avatars.githubusercontent.com/u/225102?v=4"
},
{
"type": "User",
"login": "tmatth",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/66862?v=4"
},
{
"type": "User",
"login": "lephilousophe",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/1492917?v=4"
},
{
"type": "User",
"login": "gmaxwell",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/858454?v=4"
},
{
"type": "User",
"login": "FabioPedretti",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/3390837?v=4"
},
{
"type": "User",
"login": "manxorist",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/6185338?v=4"
},
{
"type": "User",
"login": "jhasse",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/80071?v=4"
},
{
"type": "User",
"login": "ccawley2011",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/19293424?v=4"
},
{
"type": "User",
"login": "dschleef",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/3475024?v=4"
},
{
"type": "User",
"login": "fkuehne",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/116994?v=4"
}
],
"contributors_sampled": 14,
"top_contributor_share": 0.626
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"autotools.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 3 contributing companies or organizations -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 7,
"reason": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "28fd5ec77f0ad0e07a371cef1047828116f6bd8a",
"ran_at": "2026-07-23T19:32:51Z",
"aggregate_score": 3.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-01T02:57:32Z",
"oldest_open_prs": [
{
"number": 14,
"created_at": "2020-09-30T07:31:44Z",
"last_comment_at": "2025-04-01T12:02:31Z",
"last_comment_author": "mcmtroffaes"
},
{
"number": 25,
"created_at": "2026-06-11T22:24:02Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": null,
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 10,
"created_at": "2020-01-20T15:18:11Z",
"last_comment_at": "2025-03-24T12:10:17Z",
"last_comment_author": "petterreinholdtsen"
},
{
"number": 20,
"created_at": "2025-03-20T08:17:47Z",
"last_comment_at": "2025-03-24T12:07:45Z",
"last_comment_author": "petterreinholdtsen"
},
{
"number": 21,
"created_at": "2025-06-06T10:45:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 22,
"created_at": "2025-07-03T15:26:44Z",
"last_comment_at": "2025-07-04T00:44:46Z",
"last_comment_author": "rillian"
},
{
"number": 23,
"created_at": "2026-01-25T17:46:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 24,
"created_at": "2026-03-21T16:29:45Z",
"last_comment_at": "2026-04-07T00:35:32Z",
"last_comment_author": "BreakingBad6"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/xiph/theora",
"host": "github.com",
"name": "theora",
"owner": "xiph"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 49,
"inputs": {
"security": 39,
"vitality": 36,
"community": 51,
"governance": 45,
"engineering": 72
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 36,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "at_risk",
"name": "Development activity",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"commits_last_year": 14,
"human_commit_share": 1,
"days_since_last_push": 73,
"active_weeks_last_year": 5
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 73 days ago",
"points": 18,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 73
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "5/52 weeks with commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 5
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "14 commits in the last year",
"points": 10.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 14
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 7,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 32,
"inputs": {
"releases_count": 3,
"latest_release_tag": "v1.2.0",
"releases_from_tags": true,
"days_since_latest_release": 481,
"mean_days_between_releases": 2832.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "3 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 3
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 481 days ago",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 481
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2832.2 days",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2832.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 73,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 73 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 73
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 51,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"forks": 79,
"stars": 125,
"watchers": 19,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "125 stars",
"points": 34,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 125
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "79 forks",
"points": 15.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 79
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "19 watchers",
"points": 7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 19
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 45,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 14,
"top_contributor_share": 0.626
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 63% of commits",
"points": 8.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 63
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "14 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 14
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"merged_prs": 0,
"open_issues": 6,
"closed_issues": 5,
"issue_closed_ratio": 0.455,
"closed_unmerged_prs": 12
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "46% of issues closed",
"points": 21.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 46
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "0/12 decided PRs merged",
"points": 0,
"status": "missed",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 0,
"decided": 12
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"followers": 631,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "xiph",
"public_repos": 36,
"account_age_days": 4370
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "631 followers of xiph",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 631,
"login": "xiph"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "36 public repos, account ~11 yr old",
"points": 23.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 36
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 72,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"video",
"codec",
"compression",
"theora",
"ogg",
"libtheora"
],
"has_wiki": false,
"homepage": "https://theora.org/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://theora.org/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "6 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 6
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 39,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 9
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 51,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.61,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "61 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 32.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 61,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"win32/xmingw32/Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "win32/xmingw32/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "win32/xmingw32/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 107042,
"source_files_sampled": 124,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/124 source files over 60KB",
"points": 53.2,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 124,
"oversized": 4
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-23T19:33:03.048762Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/x/xiph/theora.svg",
"full_name": "xiph/theora",
"license_state": "custom",
"license_spdx": null
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with xiph/theora. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
