ziggy42/epsilon holds a health index of 60 out of 100, placing it in the Moderate band. It scores highest on Vitality (77/100) and lowest on Security (36/100). It was last updated 16 days ago. A single contributor accounts for most of its recent work.
60
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
60
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch pypi package 'epsilon-scripts' from its registry
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 11 ⇿
0Stars
11Forks
5Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 4
OpenSSF Scorecard 3.6 / 10
3.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 16:23 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"wasm",
"golang",
"go",
"webassembly",
"webassembly-runtime"
],
"is_fork": false,
"size_kb": 535,
"has_wiki": false,
"homepage": null,
"languages": {
"C": 28900,
"Go": 537413,
"Python": 9000,
"Makefile": 7646,
"WebAssembly": 104
},
"pushed_at": "2026-07-09T15:44:44Z",
"created_at": "2025-11-22T14:14:22Z",
"owner_type": "User",
"updated_at": "2026-07-09T15:45:16Z",
"description": "A WASM virtual machine written in Go with 0 dependencies",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://andreapivetta.com/",
"name": "Andrea Pivetta",
"type": "User",
"login": "ziggy42",
"company": "@google",
"location": "Zurich",
"followers": 58,
"avatar_url": "https://avatars.githubusercontent.com/u/4258550?v=4",
"created_at": "2013-04-25T19:02:19Z",
"is_verified": null,
"public_repos": 41,
"account_age_days": 4838
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-07-09T15:44:10Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-05-18T21:17:57Z"
},
{
"tag": "v0.0.4",
"kind": "patch",
"published_at": "2026-02-01T01:55:57Z"
},
{
"tag": "v0.0.3",
"kind": "patch",
"published_at": "2025-12-20T15:44:13Z"
},
{
"tag": "v0.0.2",
"kind": "patch",
"published_at": "2025-12-14T20:30:52Z"
},
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2025-12-07T22:30:19Z"
}
],
"recent_commits": [
{
"oid": "cfa0c9435331a4ab6ad83290c54c8b3be4a82f9d",
"body": null,
"is_bot": false,
"headline": "Release version 0.1.1",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-07-09T15:44:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b4561e6eb41e996c31ec866c4fd7c277c02a83b",
"body": "* Speed up the VM dispatch hot path\n\nThree stacked changes, measured with the benchmark suite (n=6 vs main:\ngeomean -1.99%, FactorialRecursive -5.75%, FibonacciRecursive -4.32%,\nSortingBubbleSort -4.49%, no regressions):\n\n- Inline the 20 i32/i64 comparison ops into the dispatch switch as\n pop + in-\n[…]\nthe benchmark suite is flat (n=4) with instantiation\n7 allocations cheaper, and the full spec (including linking.wast) and\nWASI suites pass.\n\n* Tidy up module instantiation naming and comment wrapping",
"is_bot": false,
"headline": "Speed up the VM dispatch hot path (#85)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-07-09T15:10:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bc253d81b2cabe3c10a9b0501393426068b4232e",
"body": "…#83)\n\n* Rework simd.go float lane ops and shared helpers\n\nFloat lane operations no longer take per-lane func values: they are\nwritten directly on top of small inlinable f32x4/packF32x4/f64x2/\npackF64x2 helpers, float comparisons build lane masks directly instead\nof round-tripping bools through NaN-\n[…]\nrage entirely.\n\nBenchmarks (n=6): geomean -2.60%, SortingMergeSort -5.5%, Indirect\n-2.7%, HostCall -1.1%, InstantiateSmall -10.2% time and one allocation\nfewer, InstantiateLarge -2.0%; no regressions.",
"is_bot": false,
"headline": "Remove the closure-based generic handlers from the VM dispatch loop (…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-12T21:21:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4a77e23ec84da77b66cba8466de3cfd95dec1356",
"body": "Replace the per-lane closure-dispatch helpers for the integer SIMD\ninstructions with branchless SWAR (SIMD-within-a-register) code that\noperates on both 64-bit halves of a V128Value at once.\n\nThe previous implementations looped over lanes calling a function value,\nwhich the compiler cannot inline, s\n[…]\nnline instead. The now-unused\ndispatch helpers are removed.\n\nResults (make bench-compare, 6 samples): IntegerVectorMath -6.68%, no\nsignificant change on the non-SIMD benchmarks, allocations unchanged.",
"is_bot": false,
"headline": "Speed up integer SIMD ops with SWAR implementations (#82)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-08T22:37:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "36ae767961c70fda27ba567eab1fd09b9327b0ff",
"body": null,
"is_bot": false,
"headline": "Commit benchmark Wasm files and add CI drift check",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-08T21:08:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a765924f6c3c14340092a5e47522124da008d5a2",
"body": "* Format benchmark C sources with clang-format and add a fmt-c target\n\nAdd a Google-style .clang-format and a fmt-c Make target, and reformat the\nbenchmark C sources to match. Also add a .clangd that silences the editor-only\n-Wunknown-attributes warning for the wasm-specific export_name attribute (t\n[…]\nment-wise integer operations across i8/i16/i32/i64 lane widths so the suite\nexercises the VM's integer SIMD opcode execution, which was previously almost\nentirely float-only.\n\n* update README, .clangd",
"is_bot": false,
"headline": "Format C benchmarks and add integer SIMD benchmark (#81)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-07T22:14:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3638965c88c6b80c0c36b9bc30110db51e7dcc95",
"body": "* Format Markdown with mdformat and add a fmt-md target\n\nAdd a fmt-md Makefile target that wraps repo-owned Markdown to 80 columns\nwith mdformat, using the GFM plugin so tables survive and the frontmatter\nplugin so skill metadata is preserved. The file set comes from git ls-files\nso new docs are pic\n[…]\no the workflow, so unformatted Go or Markdown and vet\nissues block a merge instead of only being caught by the local review skill.\nuv and Go are already set up in the job, so no extra setup is needed.",
"is_bot": false,
"headline": "Format Markdown with mdformat and add a fmt-md target (#80)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-07T16:30:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dcf0e928716509e4ef18b48adbf333721b51d40e",
"body": "Add a project overview and layout map, a security rule, and a\ndefinition-of-done to AGENTS.md; correct the dependencies rule to allow the\ngolang.org/x modules; and trim generic guidance down to project-specific\nrules an agent cannot infer.\n\nIn the code-review skill, verify AGENTS.md stays current and point the\nproject-standards check at AGENTS.md instead of the removed .rules file.",
"is_bot": false,
"headline": "Restructure AGENTS.md and update the code-review skill",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-07T15:44:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8df74988687d3cc0aff960d6c296aeb597149f36",
"body": "…laude Code\n\nRename .rules to AGENTS.md as the single source of truth and repoint CLAUDE.md\nat it. Drop the redundant GEMINI.md symlink since agy and the Gemini CLI both\nread AGENTS.md. Symlink .claude/skills to .agents/skills so Claude Code picks\nup the project skills that previously only Antigravity discovered.",
"is_bot": false,
"headline": "Make AGENTS.md the canonical agent rules file and share skills with C…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-07T14:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e32acfa0be686106d8f51011e933937bfe6bb54",
"body": null,
"is_bot": false,
"headline": "Bump checkout and setup-go GitHub actions to v5",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-03T22:19:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9386c517931f7935660bd11415a2725a12d98401",
"body": null,
"is_bot": false,
"headline": "Sync README CLI usage and make help text with actual output",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-03T22:19:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97b5e1f69048f096d3aee242a9d2de7a14dc25b0",
"body": null,
"is_bot": false,
"headline": "Update golang.org/x/sys to v0.45.0 and normalize go directive to 1.25.0",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-03T22:10:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87a6ace3e98c9aed1bde1b1e3c77295541e6578f",
"body": "A host function receives its arguments as an args... slice. Two properties\nmust hold and were previously untested:\n\n - Reentrancy: if a host function re-enters the VM and that triggers a\n nested host call, the outer call's arguments must not be clobbered.\n - Retention: a host may keep the args \n[…]\nrty on popValueTypes (its other caller, Invoke's results,\nrelies on it too), note it at the host call site, and add two tests that fail\nif a future change reuses a shared argument buffer across calls.",
"is_bot": false,
"headline": "Add tests documenting host-call argument isolation (#76)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-03T21:46:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "12b3de29319c17818cc195fdc012e2ed2ab88856",
"body": "* Reduce module parsing allocations with a zero-allocation limited reader\n\nReplace the per-function bufio.Reader (which allocated a fresh 4KB buffer\nfor every function body) with a small limitedByteReader that caps reads to\nthe function size without any heap buffer. newParser now also reuses an\ninpu\n[…]\n, and the\n errMissingEndOpcode result, instead of the sizeHint estimate essay.\n - Trim duplicated and slightly inaccurate VM locals comments.\n - Shorten the CallStackPreallocationSize config doc.",
"is_bot": false,
"headline": "Reduce parser and VM call-path allocations (#74)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-06-03T21:37:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "739f61cde8ac37116720ac227e569e53b6841d8e",
"body": "Rewrite recursive and loop-heavy benchmark C programs to prevent LLVM optimizations from distorting performance metrics under -O3. Specifically, add volatile keywords and noinline/disable_tail_calls compiler attributes to guarantee that the WebAssembly call stack is properly exercised.\n\nShift execut\n[…]\n56 compression function execution for dense integer calculations\n\n- Host call round-trip overhead using an imported noop function\n\n- Module parsing, validation, and instantiation overhead measurements",
"is_bot": false,
"headline": "Harden and expand WebAssembly benchmarks suite (#73)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-27T20:50:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9172b20ac29eb335dea5944aed774d57cfb4550d",
"body": "…s to wasi-sdk (#72)\n\n* Migrate benchmarks to WASI-SDK compilation and consolidate build, test, and documentation commands under Makefile\n\n* Implement strict local WABT auto-provisioning and path resolution in Go test runner\n\n* Remove redundant manual prerequisites from README.md\n\n* Switch docs and \n[…]\n text for wasm-related targets\n\n* Simplify WABT binary path resolution and trim wasip1 README\n\n* Rename internal/wabt/resolve.go to toolchain.go\n\n* Group test targets together and compact .PHONY block",
"is_bot": false,
"headline": "Add Makefile-based build/test/bench entry point and migrate benchmark…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-27T20:11:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "778ba7348e3a77f2aa8d75f89a820e9a53514036",
"body": "…e (#71)\n\nWebAssembly/testsuite is the flat, auto-synced test mirror that\naggregates tests from the spec repo and the in-flight proposal repos.\nEvery test is a single .wast file in one directory, named with\nconventions that identify the proposal it covers, which makes\nproposal opt-in trivial.\n\nThe s\n[…]\ngle TestSpec that walks\ntestsuite/*.wast. The previous core/simd directory split disappeared\nwith the move to a flat layout; SIMD tests remain distinguishable by\ntheir filename prefix in t.Run output.",
"is_bot": false,
"headline": "Switch spec test source from WebAssembly/spec to WebAssembly/testsuit…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-27T14:02:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4c35aefde28f9d28fbec268c19acd46fbdecc2b5",
"body": "The previous 1.0.39 wast2json could not compile the typed function\nreferences spec tests (br_on_null, br_on_non_null, call_ref,\nreturn_call_ref, ref_as_non_null); 1.0.40 added support for those.\nAlso factor the version into a single shell variable so future bumps\ntouch one line.",
"is_bot": false,
"headline": "Bump WABT to 1.0.41 in CI",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-27T13:10:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a82b18ecc75054ae082639e144c69a038b43f1a",
"body": "…mark iterations",
"is_bot": false,
"headline": "add security guidelines to code review skill and reduce default bench…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-22T16:01:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b5e7a3eb43cf7e7a5c1293d4a0e188fd846f4dc",
"body": "* Introduce runtime element and data instances\n\nThe store kept parser-side elementSegment/dataSegment values directly, so\nthe slices inside (functionIndexes, content, offsetExpression) shared\nbacking arrays with moduleDefinition. The current code only ever mutated\nthe store's slice headers, so the m\n[…]\ntSegment, and applyActiveDataSegment\nso the instantiation loops read as a simple filter / apply / drop sequence\nthat matches the rhythm of the surrounding import and global loops. No\nbehaviour change.",
"is_bot": false,
"headline": "Introduce runtime element and data instances (#70)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-22T15:24:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d5c641811b0f04fef1fcf8d2956245a1656998cd",
"body": "* Add .antigravitycli to .gitignore\n\n* Optimize memory access by inlining bounds checks and direct binary operations",
"is_bot": false,
"headline": "Optimize memory access by using direct slice indexing (#69)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-19T21:45:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2364083da10eccc0a2dc68e8fe761c087ec1ab28",
"body": null,
"is_bot": false,
"headline": "Link article URL to the word 'article' in CHANGELOG.md",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-19T07:30:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df1de44c938d4e37a32ce73fa5c0f23910d60eac",
"body": null,
"is_bot": false,
"headline": "Release version 0.1.0",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-18T21:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2216b72184b2940240f57f622abbb312ebf3187",
"body": "* Skip redundant stack unwind on block end and branch fall-through\n\nhandleEnd is only reached by normal fall-through to the end of a block\nor function, where validation guarantees the stack is already at\nstackHeight + outputCount. Drop the unwind and the getOutputCount lookup\nit depends on; just dis\n[…]\nhs in getInputCount\n\nEmpty (-0x40) and value-type block types both consume zero stack inputs,\nso a single 'blockType < 0' guard covers both cases. This is a clarity\nrefactor; benchmarks are unchanged.",
"is_bot": false,
"headline": "Performance improvement (#68)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-18T20:42:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "910eb2d7e554f26f87caaf2d0a2c9b8d6ed5b0ed",
"body": "* Add configurable resource limits to Config\n\nA few-byte module could previously declare a multi-GiB table or\ntens of thousands of locals, forcing the runtime into oversized\nallocations before instantiation could be refused. Expose three\nceilings on Config (MaxTableElements, MaxMemoryPages,\nMaxLocal\n[…]\nine.\n- Re-greedy the prose for the fields whose wrap got tighter than it\n needed to be, matching the original wrapping where the swap from a\n literal default to a long constant name still allows it.",
"is_bot": false,
"headline": "Add configurable resource limits to Config (#67)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-17T09:02:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "71511467fa33854cbad6ef658f0a9943eb9cfe54",
"body": null,
"is_bot": false,
"headline": "Add security audit skill definition",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-16T12:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a92c0ad1f3fa7312ac9c693587beff0623c94d5",
"body": "…mpact of co-author trailers\n\nClaude Code auto-loads CLAUDE.md but not .rules, so the existing rules\nwere not in the agent's context at startup. Mirror the GEMINI.md\npattern with a CLAUDE.md -> .rules symlink.\n\nAlso expand the \"Commit Authors\" rule to spell out why agent\nco-author trailers are forbidden: they fail the cla/google check on\nthe PR, which already bit one branch.",
"is_bot": false,
"headline": "link CLAUDE.md to .rules so agent rules auto-load, and document CLA i…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-16T10:42:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de9e7a2e1dd9e13a69824165bc229ae92022f6ab",
"body": "* cap parseVector pre-allocation to bound attacker-controlled counts\n\nparseVector previously did make([]T, count) where count is parsed\ndirectly from the WASM binary, allowing a few-byte module to request\na multi-GB allocation. Switch to make([]T, 0, min(count, 4096)) plus\nappend: in the common case\n[…]\nation surfaces\nas ErrUnexpectedEOF before runaway growth). For readImmediateVector,\nmirror the parseVector fix: cap the initial slice capacity and\nappend, letting EOF in the inner read bail out early.",
"is_bot": false,
"headline": "Cap attacker-controlled pre-allocations in the parser (#66)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-16T10:38:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eb57397c45e77abf4a28805ac6a790784e5c5450",
"body": null,
"is_bot": false,
"headline": "document concurrency model.",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-16T09:53:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1f58028d817393358a7c7d88d28ae8ed7fba6fe",
"body": "The previous implementation masked negative blocktype values with 0x7f, so\ncanonical multi-byte SLEB128 encodings of values like -129 (0xff 0x7e) were\nsilently coerced to a valtype (i32 in this case) instead of being rejected.\nMatch the spec by enumerating the legal negative codes (valtypes plus -64\nfor empty) and treating anything else as invalid.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix block type validation to reject non-canonical SLEB128 encodings",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-16T09:28:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ace9955a6b236df430977b9141d620ec53d578d3",
"body": "The typed select instruction must have a vector of exactly one valtype.\nThe previous code accepted any vector length, underflowed v.pc when size\nwas zero, and silently dropped extra types when size was greater than one.\nAlso reject unknown type codes so they don't fall into the polymorphic\nuntyped-select path.",
"is_bot": false,
"headline": "fix select t* validation to require exactly one result type",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-16T09:09:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da2b1398edfdbaf90cace41a1eee56cc04c2acf4",
"body": "handleTableInit previously trapped on any table.init against an active\nor declarative segment (even with n=0) and ignored passive segments\nwhose entries were encoded as constant expressions, so a passive segment\ncontaining ref.null (case-5 binary encoding) silently failed to copy.\n\nResolve every ele\n[…]\no\nbranch on encoding form. handleTableInit becomes a single dispatch on\nmode, and initActiveElements collapses into applyActiveElementSegments.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix table.init handling of dropped and expression-form element segments",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-16T08:50:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "44baf95469c1df549d89455dffebbbbd8e0807a4",
"body": "Replaces the allocate-then-copy pattern with a direct slice into wasm\nmemory via memory.Get. Removes a per-call allocation and copy, performs\nthe destination bounds check upfront, and avoids unbounded Go-side\nallocations driven by guest-controlled length values.",
"is_bot": false,
"headline": "write directly into wasm memory in iterIovec and randomGet",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-15T23:06:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cdb8e15d425b075f29f1c0c8c3d2dc748341a1a",
"body": null,
"is_bot": false,
"headline": "fix multiple validation cases where we were far too permissive",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-15T20:05:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "483df64e7ac2139345744a8c3088363f9b0b768e",
"body": null,
"is_bot": false,
"headline": "fix global import type validation logic",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-15T19:55:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ba129b21ca82dfbbf6727dd5418f3c30d1bcade",
"body": "fd_pread and fd_pwrite require RightsFdSeek per the WASI spec (they take\nan explicit offset, implying non-sequential access), but only checked\nRightsFdRead/RightsFdWrite. Added the missing RightsFdSeek check to both.\n\npoll_oneoff only checked RightsPollFdReadwrite regardless of event type.\nAdded RightsFdRead for read subscriptions and RightsFdWrite for write\nsubscriptions. Also gated the nbytes Stat() call on RightsFdFilestatGet\nto prevent leaking file size to modules lacking that capability.",
"is_bot": false,
"headline": "Fix WASI rights bypass in pread, pwrite, and poll_oneoff (#65)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-15T18:01:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4e57f1169ee89b48657922238315e6bf56e24e7",
"body": "The existing note only mentioned files/directories being always reported\nready, leaving out that sockets behave the same way. Modules polling a\nsocket for incoming data will busy-loop at 100% CPU. Spell this out\nexplicitly so users aren't surprised.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: clarify poll_oneoff busy-loop risk for sockets",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-15T17:50:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f2c764cd4f8bc9feec0e2df28e3338730f67ac6b",
"body": "bufio.Reader wrapping io.LimitReader in parseFunction could pre-fetch\nbytes beyond what the parser consumed, causing the outer reader to resume\nat the wrong offset after the function body. Drain remaining bytes after\nreadCode to ensure the stream is always advanced by exactly the declared\nfunction size.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix parser buffer desynchronization via bufio over-read",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-15T17:46:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "943d38ce5eeb391bfcf1f93b7541d39a35a12207",
"body": "* remove builder methods to add config to a runtime.\n\nThis allows the vm attached to a runtime to be immediately created, rather than lazily, which is necessary for some further hardening we are planning to do.\n\n* Store the vm instance in Memory, Table, Global instances.\n\nThis pointer acts as a toke\n[…]\nsafe isolation for runtimes.\n\n* move validation more internally, include functions\n\n* refactor: simplify global variable initialization and add interface-based VM ownership check to function instances",
"is_bot": false,
"headline": "Cross Runtime isolation (#64)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-15T17:29:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1eedd08c96b226bc0268cbb4aae155b42df12264",
"body": "* Implement WASI side-channel mitigation by rounding clock timestamps and timeouts\n\n* Prioritize WASI spec compliance by using high-resolution clocks\n\n* Clean up redundant clock rounding logic\n\n* Simplify getTimestamp returns\n\n* format",
"is_bot": false,
"headline": "WASI: Prioritizing Spec Compliance for Clocks and Polling (#63)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-10T21:00:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e13edd06ae99369acbd0077bbd8718b89d40bd3",
"body": "* Fix uninitialized reference local leak\n\n* Update test to explicitly expect trap\n\n* Minor test tweaks\n\n* formatting",
"is_bot": false,
"headline": "Fix Uninitialized Reference Local Leak (#62)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-10T20:40:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "297a8ccde0638622b7126e37f77b24d6dfadfcb9",
"body": null,
"is_bot": false,
"headline": "Fix host function stack underflow vulnerability (#61)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-10T20:15:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ac96a55a11400085717f67cae6a3eb16115ff05",
"body": null,
"is_bot": false,
"headline": "Validate reference type arguments in ModuleInstance.Invoke (#60)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-10T19:57:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f03ebb37923e2e0617a81f7b60262feba4af6af8",
"body": null,
"is_bot": false,
"headline": "formatting",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T15:14:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d95453c38ee3fc71bf515bca8e623aeacb03c7c4",
"body": null,
"is_bot": false,
"headline": "Fix WASI clock implementation flaws (#59)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T15:07:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db9b97022f4387cdad6f1fa58062d3a747f814d3",
"body": null,
"is_bot": false,
"headline": "Fix WASI poll_oneoff clock timeout overflow (#58)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T15:02:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52c5234e346298e8ab7586a1d9fb89bd93d7b519",
"body": "* Fix input validation and FD leak in WASI host functions\n\n* Remove large reproduction test file",
"is_bot": false,
"headline": "Fix Input Validation Failures and FD Leak in WASI Host functions (#57)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T14:51:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17e2d88b5e62ab3de3f05ecf58987438288a875d",
"body": "* Fix WASI rights escalation and capability bypass\n\n* Rename vulnerability tests to wasi_resources_test.go",
"is_bot": false,
"headline": "Fix WASI rights escalation and capability bypass (#56)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T14:41:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2a08c23602806f4567b97c91cfe354ac1d388bb",
"body": "* Remediate integer overflows in table and memory operations\n\n* Remove reproduction tests for VULN-10, 11, 12\n\n* Remove PR description scratch file",
"is_bot": false,
"headline": "Remediate Table and Memory Integer Overflows (#55)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T14:20:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df5cf437722f7c6d92692bb1f5f2659c13a483fd",
"body": "* Fix memory index validation bypass in load/store instructions\n\n* Refactor TestMemoryIndexValidation to use a single byte slice\n\n* Apply formatting to validation_test.go",
"is_bot": false,
"headline": "Fix memory index validation bypass in load/store instructions (#53)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T13:55:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6d1c3212668e5bdf416899c9ae7d8f37b198408",
"body": "* Remediate VULN-06: Add bounds checking for block type indices\n\n* Clean up VULN-06 test: use raw bytes and remove unnecessary recovery\n\n* Minor formatting cleanup in TestVuln06",
"is_bot": false,
"headline": "Add bounds checking for block type indices (#52)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T13:40:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19d0ffd53bb6a5b2b8e3e65810de1296b93baeed",
"body": "…mediate values as end opcodes (#51)",
"is_bot": false,
"headline": "fix: improve end-of-function validation to prevent misinterpreting im…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T13:27:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4833b535846e7a9251e9d7a10734c7ad04ed584e",
"body": "…VM isolation (#50)",
"is_bot": false,
"headline": "feat: prevent forbidden cross-runtime function imports by validating …",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T13:08:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bea4a0cec53d5977576d129caea789c6b0563873",
"body": "…tions (#49)",
"is_bot": false,
"headline": "feat: validate funcref arguments to prevent access to unexported func…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T12:40:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a310ecbf6f2a41203d6171aae7bc8125291db99f",
"body": "* add tests for vuln1, vuln2\n\n* fix vuln2\n\n* fix Stack Corruption via return Instruction",
"is_bot": false,
"headline": "Fix stack-related vulnerabilities (#48)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-05-09T11:03:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80b403a809bb70d8bf320cbca151dcb9bf605c2d",
"body": null,
"is_bot": false,
"headline": "unify how agents discover skills (#47)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-03-01T14:59:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1765d3dd7a8047e51b7f06be554addc8f2a8063b",
"body": "* Simplify SIMD float operations and add benchmark filtering\n\n* Add UTF-8 encoding when writing benchmark results and simplify the CLI description.\n\n* Remove unused simdF32x4Copysign\n\n* simplify floating-point type conversions in SIMD demotion and promotion functions.\n\n* Add validation for each SIMD\n[…]\naceLane` functions for improved SIMD lane manipulation.\n\n* refactor: Remove `extractLane` helper and directly implement SIMD lane extraction and storage with bitwise operations.\n\n* add missing newline",
"is_bot": false,
"headline": "Simplify some SIMD operations (#46)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-14T18:27:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4e853982e3c4c92b24527adad8646e7c3e4ed4e0",
"body": null,
"is_bot": false,
"headline": "Add SIMD vector math benchmark",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-14T14:39:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f72c4d8e708cb0a411a55c308897751ac24e7a59",
"body": "…ate all call sites.",
"is_bot": false,
"headline": "refactor: rename `invokeInitExpression` to `invokeExpression` and upd…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-13T22:20:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98bdcb5ff15c99954807fb9db74d59428b1c6948",
"body": "…m.go`.",
"is_bot": false,
"headline": "refactor: remove redundant non-negative index check for `index` in `v…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-13T22:16:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3187c9e8da814724d9752b7987b7ca194d29d8b",
"body": null,
"is_bot": false,
"headline": "remove more type conversions",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-13T21:41:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23844cafda566cfed34742a9b8e03b773e32cd35",
"body": null,
"is_bot": false,
"headline": "use uint64 as indexes to avoid pointless conversions",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-13T21:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ff08258835eeb57b8b5d8acf31351b2bc89adf1",
"body": null,
"is_bot": false,
"headline": "infline getFunction",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-13T21:06:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84e2ce230cf7901e953a20eab839cc5f38c933cb",
"body": "…sys_unix.go",
"is_bot": false,
"headline": "simplify error returns in validation.go and fix comment typo in wasi_…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-13T09:11:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dec405cc7e9978d5d828cee5593a6dc849db848",
"body": "…go`.",
"is_bot": false,
"headline": "remove unused argument from `moduleInstance.Invoke` call in `vm_test.…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-08T16:37:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "702d96c0326bdebafd849999dcc41e7570406c49",
"body": "* parser errors\n\n* pushAll\n\n* vm errors\n\n* validation errors\n\n* instance errors\n\n* one more err\n\n* inline getrange",
"is_bot": false,
"headline": "touch up errors (#44)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-08T01:29:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e029be8563639ca1a1a755d26c40726af1cffd3",
"body": "* Implement instruction fuel (gas) mechanism\n\n* format code review skill\n\n* Clarify default values in Config documentation\n\n* do not mutate configs\n\n* inline the loops, inline the number of instructions per function\n\n* Revert \"inline the loops, inline the number of instructions per function\"\n\nThis reverts commit 9590ace427c8de4cbc44c0007d7df0b574ea3a13.",
"is_bot": false,
"headline": "Implement Instruction Fuel (Gas) Mechanism (#40)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-07T23:57:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faf742aed06dc18a96a25fad213e501ff75c5cca",
"body": "* Update benchmark comparison script to use benchstat\n\n* Improve benchmark stability by interleaving runs and pinning to CPU\n\n* delete a bunch of unnecessary stuff\n\n* indentation\n\n* fix compare on macOS\n\n* add count option\n\n* clarify indirect dependencies are used by benchstat, not the actual vm",
"is_bot": false,
"headline": "Improve benchmark comparisons stability (#43)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-07T21:11:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d76ba13b550268edcffb4ccb51c2eaa1ad3f2949",
"body": "* Fix sorting benchmark state persistence and increase data size\n\n* fix compare script to report regression from 0",
"is_bot": false,
"headline": "Fix sorting benchmark state persistence and increase data size (#42)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-07T17:36:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96a6f146fe110fead0aca3fe9ebeeaacec38b491",
"body": "…g test (#41)",
"is_bot": false,
"headline": "Clarify symlink resolution comments and add intermediate file blockin…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-07T15:59:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "974540e72351f464a84fad0d10f237145a674ab0",
"body": null,
"is_bot": false,
"headline": "add a code review skill",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-03T23:31:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcb801158dc6a5fd203202af3cd0ae7df6e0cc79",
"body": "* Document CLI options\n\n* Remove Release section from README",
"is_bot": false,
"headline": "README fixes (#39)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-03T22:40:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ba134e82ac8d7dbfab8fc339fe45f7eda5916b2",
"body": "* delete the repl\n\n* Simplify things\n\n* simplify cli help string\n\n* use flag.Func\n\n* inline",
"is_bot": false,
"headline": "Delete REPL, improve the CLI (#38)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-01T23:50:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6238e496be330ea9e37ffaecf3be9a9869cf9056",
"body": null,
"is_bot": false,
"headline": "Release version 0.0.4",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-01T01:55:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77e4aaa8d6142503aaf0ee42d27fb1c59581fe47",
"body": "This skill guides the agent through the release process, including version determination, verification (build, test, benchmarks), changelog generation, and git tagging.",
"is_bot": false,
"headline": "Add release skill",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-02-01T01:44:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1ecfcd3ccd750bc6278495bcbe39f4dd83e4692",
"body": "- Add StartFunctionName, MemoryExportName, ModuleName constants to wasip1\n- CLI now invokes _start by default when no function is specified\n- Update README example to use wasip1.StartFunctionName",
"is_bot": false,
"headline": "Add WASI ABI constants and default to _start entry point",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-31T23:26:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb424e38914f4f01700978b9f732dc390df398b8",
"body": null,
"is_bot": false,
"headline": "Update .rules to prohibit agent co-authorship on commits",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-31T22:46:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3fb1f9b68feaafe461f8a46ed74784ad35f755c",
"body": "* Refactor WASI module API to use builder pattern\n\n- Replace WasiConfig struct with WasiModuleBuilder\n- Implement fluent builder API with WithArgs, WithEnv, WithDir, etc.\n- Update wasi_unix.go and wasi_stub.go with builder implementations\n- Update main.go CLI to use new builder pattern\n- Update READ\n[…]\nedundant cleanup from newWasiResourceTable to prevent double-close\n- Stub implementation now stores and closes files to honor the contract\n\n* resolve module asap\n\n* remove newline\n\n* WithEnvMap\n\n* cmp",
"is_bot": false,
"headline": "Use a builder to construct WASI modules (#37)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-31T22:44:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b30ea2d4ce370ee96de7c6cd3b18b540b92a2f8c",
"body": null,
"is_bot": false,
"headline": "Fix WASI test command in README.md",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-23T17:34:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e47115b94b8d02441a59aed8d0d76c21359b5692",
"body": "… a non relative path",
"is_bot": false,
"headline": "Return syscall.EPERM rather than os.ErrInvalid when tryint to resolve…",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-04T17:25:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79b2af8b7f369266c868811a2b8d1cbeb2961909",
"body": null,
"is_bot": false,
"headline": "Fix OpenBSD utimeNow constant",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-04T12:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e39d514da26050e161abd4f5c548cf3ab0a800db",
"body": "* Use Python to run WASI tests\n\n* Use '=' as separator for --dir argument for Windows compatibility\n\nOn Windows, absolute path themselves contain ':'\n\n* Fallback to os.Open when trying to open a path\n\nThis is again necessary for Windows where absolute paths would otherwise fail",
"is_bot": false,
"headline": "A few initial infra changes to better support Windows (#35)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-03T19:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ff3560e77196c02ce73abb351c3839977d3c873",
"body": "* Whops, WASI test suite already comes with pre-built wasm binaries in another branch\n\n* Run WASI spec tests natively\n\n* Fix utimeOmit on macOS (and other UNIXes though they were not tested)\n\n* Use utimeNow rather than manually fetching the current time\n\n* Run WASI tests in Github actions\n\n* Remove submodule init in wasi_tests\n\n* Touch up the READMEs",
"is_bot": false,
"headline": "Run WASI test suite natively, fixes bug on macOS (#34)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-03T16:59:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0376abe7c00d73af87209d85f36329a10db73e89",
"body": null,
"is_bot": false,
"headline": "Reduce docker image size by ~ 1 GB",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-03T13:24:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12d70b806e648cef4b5f59a3e1219d40ad6ca598",
"body": null,
"is_bot": false,
"headline": "Fix incorrect sleep times in wasi_poll",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-02T17:21:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1502d966f9ae546e009a788b89adfba444d173a9",
"body": null,
"is_bot": false,
"headline": "Simplify wasi_poll",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-02T16:38:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c62fb92e551b42ca37c698cfe45754089723d27",
"body": null,
"is_bot": false,
"headline": "Delete dead code and pointless comments",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-02T16:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "527dbf5518c9f39f1e507a32ce7129d52c1495ac",
"body": null,
"is_bot": false,
"headline": "Remove dot",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-02T00:17:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cff8ad1e0fa4b7a09552554d17e1902de882ca18",
"body": "* Simplify splitPath, mapError\n\n* Delay trailing slash checks\n\n* Flatten resolvePath\n\n* Simplify walkToParent\n\n* Remove unused argument in walkToParent, merge link resolution into resolveSymlink\n\n* Fix datasync\n\n* Remove a bunch of err checks\n\n* Unify readlinkat\n\n* Pass memory rather than module instance to pollOneoff",
"is_bot": false,
"headline": "Wasi cleanup (#33)",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-02T00:07:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f3668f370ab3753bc8459bd00da4f8997aefb8e",
"body": null,
"is_bot": false,
"headline": "Mention WASI in the main README",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T17:24:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f712d7c33985b734bfa326a37f059761ef2dd3b",
"body": null,
"is_bot": false,
"headline": "Add WASI specific README",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T17:20:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db9f32085097b8f35ccb331e784a434517ac5ae3",
"body": null,
"is_bot": false,
"headline": "Allow Windows builds, though Windows is unsupported",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T16:51:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12f37c357942f8b125ca50e236d848d756618478",
"body": null,
"is_bot": false,
"headline": "Move unix only things to wasi_sandbox",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T16:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a3f4f15a38e813b645f3bbea1147b748183b54b",
"body": null,
"is_bot": false,
"headline": "Allow overriding stdin/out/err, fix subscriptions layout",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T16:12:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6e3488818c2fbb22f5fd9a0628422dbfeade318",
"body": null,
"is_bot": false,
"headline": "proc_exit should exit the WASM code, not turn down the whole Go process",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T15:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2556a8557c539a4278eb01bca011d5b4f9948aca",
"body": null,
"is_bot": false,
"headline": "Bind",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T14:31:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd9c13d08d661567907e8daddd67dd5ba079d2c6",
"body": null,
"is_bot": false,
"headline": "Fix last failing WASI spec test",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T14:10:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95e0a02690bfef90d35a63f39302fa934623836d",
"body": "Thanks Gemini 3.0 Pro. I would have never found this issue on my own.",
"is_bot": false,
"headline": "Fix one more spec test",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T14:01:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ca5a129ac5194c3534513c9191865e7fc80a8d4",
"body": null,
"is_bot": false,
"headline": "Fix style",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T13:42:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c4c3d406b2ddf8278a8a52f6ee4f5af2027e3ac",
"body": null,
"is_bot": false,
"headline": "Fix one more WASI tests",
"author_name": "Andrea Pivetta",
"author_login": "ziggy42",
"committed_at": "2026-01-01T11:32:46Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 6,
"commits_last_year": 193,
"latest_release_at": "2026-07-09T15:44:10Z",
"latest_release_tag": "v0.1.1",
"releases_from_tags": true,
"days_since_last_push": 16,
"active_weeks_last_year": 18,
"days_since_latest_release": 16,
"mean_days_between_releases": 42.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/ziggy42/epsilon",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/ziggy42/epsilon",
"is_deprecated": false,
"latest_version": "v0.1.1",
"repository_url": "https://github.com/ziggy42/epsilon",
"versions_count": 6,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-09T15:44:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 16
}
]
},
"popularity": {
"forks": 11,
"stars": 434,
"watchers": 5,
"fork_history": {
"days": [
{
"date": "2025-12-02",
"count": 1
},
{
"date": "2025-12-09",
"count": 6
},
{
"date": "2025-12-10",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2026-05-21",
"count": 1
},
{
"date": "2026-06-02",
"count": 1
}
],
"complete": true,
"collected": 11,
"total_forks": 11
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 64795,
"source_files_sampled": 54,
"oversized_source_files": 1,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 2290
},
"dependencies": {
"manifests": [
"go.mod",
"pyproject.toml",
"requirements.txt"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"pypi"
],
"dependencies": [
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.45.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 66,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 9,
"closed_unmerged_prs": 10
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "ziggy42",
"commits": 191,
"avatar_url": "https://avatars.githubusercontent.com/u/4258550?v=4"
},
{
"type": "User",
"login": "deadprogram",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/5520?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.995
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"go.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 0,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "cfa0c9435331a4ab6ad83290c54c8b3be4a82f9d",
"ran_at": "2026-07-25T16:23:56Z",
"aggregate_score": 3.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-09T15:45:23Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-09T15:10:07Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/ziggy42/epsilon",
"host": "github.com",
"name": "epsilon",
"owner": "ziggy42"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"security": 36,
"vitality": 77,
"community": 61,
"governance": 59,
"engineering": 61
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 77,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"commits_last_year": 193,
"human_commit_share": 1,
"days_since_last_push": 16,
"active_weeks_last_year": 18
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 16 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 16
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "18/52 weeks with commits",
"points": 12.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 18
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "193 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 193
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 6,
"latest_release_tag": "v0.1.1",
"releases_from_tags": true,
"days_since_latest_release": 16,
"mean_days_between_releases": 42.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "6 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 6
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 16 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 16
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~42.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 42.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 16,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 16 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 16
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 61,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"forks": 11,
"stars": 434,
"watchers": 5,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "434 stars",
"points": 42.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 434
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "11 forks",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 11
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "5 watchers",
"points": 3.3,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 5
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 59,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.995
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"merged_prs": 66,
"open_issues": 0,
"closed_issues": 9,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 10
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "66/76 decided PRs merged",
"points": 33.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 66,
"decided": 76
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"followers": 58,
"owner_type": "User",
"is_verified": null,
"owner_login": "ziggy42",
"public_repos": 41,
"account_age_days": 4838
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "58 followers of ziggy42",
"points": 12.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 58,
"login": "ziggy42"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "41 public repos, account ~13 yr old",
"points": 23.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 41
}
},
{
"code": "account_age_years",
"params": {
"years": 13
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/ziggy42/epsilon"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 16
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 16 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 16
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "6 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 6
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [
"wasm",
"golang",
"go",
"webassembly",
"webassembly-runtime"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "5 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 5
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 36,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 71,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.58,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 2290
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "58 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 30.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 58,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"uv.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.04,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "4 of the last 100 commits agent-authored or agent-credited",
"points": 8,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 4,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 64795,
"source_files_sampled": 54,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/54 source files over 60KB",
"points": 54,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 54,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"example"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch pypi package 'epsilon-scripts' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T16:24:06.573410Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/z/ziggy42/epsilon.svg",
"full_name": "ziggy42/epsilon",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with ziggy42/epsilon. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
