0llirocks/cvss-suite має індекс здоров’я 72 зі 100, що відповідає смузі «Добрий». Найвищий показник — Engineering Quality (86/100), найнижчий — AI Readiness (43/100). Останнє оновлення було 2 дні тому. Більшість нещодавньої роботи виконує один учасник.
72
загалом / 100
Добрий
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
72
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
Типізований код — Ruby без конфігурації перевірки типів
55/55
Керовані розміри файлів — 0/47 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_language
Ruby
largest_source_bytes
17 401
source_files_sampled
47
oversized_source_files
0
Ключові факти
27зірок GitHub
11контриб'юторів
53комітів за останні 12 місяців
2днів від останнього пушу
11релізів
1бас-фактор
1відкритих issue
RubyGemsпакетних екосистем
Попередження щодо збору даних
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
No resolved dependencies carried a version and a supported ecosystem
Докладніше
Історія зірок і форків 0 ★ / 20 ⇿
0Зірки
20Форки
10Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 1Мінорні 3Патчі 6
Кожна точка охоплює 8 днів.
OpenSSF Scorecard 6.6 / 10
6.6сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-27 18:21 UTC
Повний розв'язаний набір залежностей із графа залежностей GitHub: 0 прямих і 7 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
Реєстр
Пакет
Версія
Зв'язок
RubyGems
bigdecimal
—
непряма
RubyGems
csv
—
непряма
RubyGems
rake
—
непряма
RubyGems
rspec
—
непряма
RubyGems
rspec-its
—
непряма
RubyGems
rubocop
—
непряма
RubyGems
simplecov
—
непряма
Сповіщення про залежності не оцінено
Звірка сповіщень не відбулася для цього звіту: No resolved dependencies carried a version and a supported ecosystem
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"security",
"cvss",
"ruby-gem"
],
"is_fork": false,
"size_kb": 8224,
"has_wiki": false,
"homepage": "https://cvss-suite.0lli.rocks",
"languages": {
"Ruby": 184562,
"Shell": 115
},
"pushed_at": "2026-07-25T05:06:51Z",
"created_at": "2016-07-13T11:05:10Z",
"owner_type": "User",
"updated_at": "2026-07-25T05:07:27Z",
"description": "CvssSuite - This Ruby gem helps you to process the vector of the Common Vulnerability Scoring System.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": "NOASSERTION",
"primary_language": "Ruby",
"significant_languages": [
"Ruby"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "0llirocks",
"company": null,
"location": "Germany",
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/4518617?v=4",
"created_at": "2013-05-24T11:22:02Z",
"is_verified": null,
"public_repos": 7,
"account_age_days": 4812
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v4.1.4",
"kind": "patch",
"published_at": "2026-07-05T09:27:18Z"
},
{
"tag": "v4.1.3",
"kind": "patch",
"published_at": "2026-04-26T14:30:50Z"
},
{
"tag": "v4.1.2",
"kind": "patch",
"published_at": "2025-12-05T18:20:48Z"
},
{
"tag": "v4.1.1",
"kind": "patch",
"published_at": "2025-05-11T09:01:18Z"
},
{
"tag": "v4.1.0",
"kind": "minor",
"published_at": "2025-04-27T08:54:17Z"
},
{
"tag": "v4.0.0",
"kind": "major",
"published_at": "2024-08-31T15:28:23Z"
},
{
"tag": "v3.3.0",
"kind": "minor",
"published_at": "2024-08-31T15:06:54Z"
},
{
"tag": "v3.2.2",
"kind": "patch",
"published_at": "2024-08-04T16:42:38Z"
},
{
"tag": "v3.2.1",
"kind": "patch",
"published_at": "2024-05-25T06:46:23Z"
},
{
"tag": "v3.2.0",
"kind": "minor",
"published_at": "2024-05-04T16:27:02Z"
},
{
"tag": "v3.1.1",
"kind": "patch",
"published_at": "2023-10-15T14:09:57Z"
}
],
"recent_commits": [
{
"oid": "71cb5ce947b0cc05efcdf047899d4756088df39b",
"body": null,
"is_bot": false,
"headline": "Merge pull request #73 from SeanLF/readme-overhaul",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-25T05:06:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a0878dc854366e5a9f087a2993c3ffca1db4622",
"body": "The usage guide claims to cover reading and enumerating metrics, and\nsince #68 merged that is no longer true: the schema is reachable\nwithout a vector, which is the thing anyone building an input form\nactually wants. Left undocumented it is only discoverable by reading\nthe source, which is the problem #8 opened about in the first place.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: document CvssSuite.metrics now that #68 has landed",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-24T16:04:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f17216682acf2f0eef33c9845ccd44bf4ef30672",
"body": "An editorial pass found the rewrite had drifted into speaking for the\nproject rather than about it. \"Most CVSS libraries stop at the number\"\nis a competitive claim about unnamed peers, unverifiable, published on\nsomeone else's front page over their name. The upgrade guide called the\nold design \"neve\n[…]\ns'.\n\n4.x's minimum Ruby is now stated as the 2.6 it actually was rather than\n\"older releases\".\n\nEvery sample re-executed after the restructure.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: cut the contributor's voice out of the maintainer's docs",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-24T16:04:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "44949c91a0e2debf18694abde6edb2be4103ea7b",
"body": "base_score checked validity before computing; temporal_score and\nenvironmental_score did not. So a malformed vector could be rejected by\nvalid? and still hand back a plausible number from the same object:\n\n cvss = CvssSuite.new('AV:A/AC:H/Au:M/C:C/I:C/A:C/ZZ:Q')\n cvss.valid? # false\n\n[…]\nilure.\n\nBreaking for anyone rescuing the old error classes, or relying on a\nnumber the vector never justified, so it belongs with the 5.0 work.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix!: stop scoring vectors that valid? has already rejected",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-24T16:04:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c0794a5483bdb0d466ddda322a087e4530e61306",
"body": "The README opened with nine badges and a two-line description, then ran\nstraight into installation and a 70-line usage dump. A reader deciding\nwhether this gem solves their problem had to get through all of it to\nfind out that metrics stay addressable after parsing, which is the part\nthat distinguis\n[…]\nTypeError or NoMethodError.\n\nThe gemspec packages docs/ so the pages the README links to ship with\nthe gem rather than only existing on GitHub.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: rewrite the README around what a reader needs first",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-24T16:04:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f3fce98f1d1225da5edffc9289a3d071e236d750",
"body": "feat!: add CvssSuite.parse and make the parsing internals private",
"is_bot": false,
"headline": "Merge pull request #72 from SeanLF/leaked-internals-and-parse",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-24T07:22:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9a5b4b4fe48c94aee3938c8dba240dc19c2d3fd",
"body": "CvssSuite.new answers every bad vector with an object that stays quiet\nuntil something reads a score, so a caller who forgets valid? meets the\nexception far from the input that caused it, or never, if that read sits\nbehind a conditional. CvssSuite.parse raises at the parse instead, so a\nbad vector i\n[…]\nprefix\nwith an unusable body yields a real version class that still answers\nversion and only reports the problem through valid? and the scores.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat!: give callers a parse path that fails at the input",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-23T17:08:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cb9b8e2495c7548c9af9f03f804d9c296bcb394a",
"body": null,
"is_bot": false,
"headline": "Merge pull request #68 from SeanLF/metrics-schema",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-23T16:52:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd2bf91feca7a176942f3f231145a6c855356fd1",
"body": "…-1.0\n\nUpdate simplecov requirement from ~> 0.22 to ~> 1.0",
"is_bot": false,
"headline": "Merge pull request #66 from 0llirocks/dependabot/bundler/simplecov-tw…",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-23T14:16:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c85e5c5dc9e541dcbb61e6e8338c4d1ab12ebe0",
"body": "docs: cite the CVSS spec formula behind each scoring calculation",
"is_bot": false,
"headline": "Merge pull request #71 from SeanLF/spec-references",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-23T14:15:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c1942a6c20dfca61b28064b228ddfbefdc0575c",
"body": "build: package only runtime files in the gem",
"is_bot": false,
"headline": "Merge pull request #70 from SeanLF/slim-gem-files",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-23T14:15:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "432437a08f1a4da4f3a95bc314ac87581ccaffc5",
"body": "feat: expose base_score on CVSS 4.0 for NVD/GHSA comparison",
"is_bot": false,
"headline": "Merge pull request #69 from SeanLF/base-score",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-23T14:14:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f04d65273b477503f9941b6ed90f1af9842a351",
"body": "deps: remove the bigdecimal upper bound",
"is_bot": false,
"headline": "Merge pull request #67 from SeanLF/bigdecimal-no-ceiling",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-23T14:07:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1019b10a6c8669019859854c4d7b733a244ff570",
"body": "The scoring methods are full of bare coefficients (8.22, 7.52, 3.25, 0.029,\n6.42, 0.915, 1.08, 10.41, 0.68/0.50, ...) copied verbatim from the CVSS spec\nequations, which is unreadable without the spec open. Add a reference above\neach -- the version, spec section, the formula, and a link -- so every \n[…]\nec 7.3) uses `x 0.9731` and exponent 13. The comments flag this so the two\naren't mistakenly \"reconciled\" into a real scoring bug.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: cite the CVSS spec formula behind each scoring calculation",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-21T03:36:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "501d5530c23afe96d24dd60492f566ed7e19e5d9",
"body": "spec.files used `git ls-files` minus test/spec, so the published gem shipped\n~20 dev-only files -- the whole .github/ CI setup, .rubocop config, Gemfile,\nRakefile, bin/ dev scripts, and the docs-site config -- none needed to run the\nlibrary. Restrict it to lib/, the licence, README and changelog, sh\n[…]\n\nRubyGems deprecated. This is the removal Gemspec/DeprecatedAttributeAssignment\nwanted, done in the packaging PR where it belongs.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "build: package only runtime files in the gem",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-21T03:36:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "436ab01833ea8f0356088ca1e332073400d6241e",
"body": "CVSS 2/3.0/3.1 already expose a public base_score -- the base-metrics-only\nscore that NVD and GHSA publish -- but 4.0 only had overall_score. Add\nCvss40#base_score so every version answers base_score uniformly.\n\nThe 4.0 base score is obtained by scoring only the base metrics: the 4.0\ncalculation tre\n[…]\ncore delegates to it just as overall_score delegates to\n@all_up.score. Verified against the vendored FIRST.org test-vector corpus.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: expose base_score on CVSS 4.0 for NVD/GHSA comparison",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-21T03:36:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ed444caa67b29d61b63368413d633bdbd495673f",
"body": "Add a public `CvssSuite.metrics(version)` returning the schema of every CVSS\nmetric and its options for a version, without constructing a vector -- so\nconsumers can build input forms directly. Closes #8 (open since 2019).\n\nVersions are keyed by the same values the rest of the library uses (Integer 2\n[…]\nrors::UnsupportedVersion (an ArgumentError). Group labels are dup'd per call\nso a caller cannot mutate the frozen schema constant.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add CvssSuite.metrics for static metric introspection",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-21T03:36:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6d8105157ef5b1e221347268e52b66bc2ad4837b",
"body": "Drop the `< 5` ceiling (follow-up to #60, which relaxed it from `< 4` to\n`< 5`). The gem uses only basic BigDecimal arithmetic, so an upper bound just\nrisks blocking consumers from a future major for no reason; keep the existing\n`>= 3.1` floor.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "deps: remove the bigdecimal upper bound",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-20T17:37:43Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1ab1c8bce483df15efa1e4133691d7609440c1bc",
"body": "Updates the requirements on [simplecov](https://github.com/simplecov-ruby/simplecov) to permit the latest version.\n- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)\n- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/\n[…]\nare/v0.22.0...v1.0.2)\n\n---\nupdated-dependencies:\n- dependency-name: simplecov\n dependency-version: 1.0.2\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update simplecov requirement from ~> 0.22 to ~> 1.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T15:45:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c434cdfe2e190ef10ed5c4101469dc37a3ab75dd",
"body": "RuboCop 1.88 cleanup + frozen string literals (v5)",
"is_bot": false,
"headline": "Merge pull request #64 from SeanLF/rubocop-cleanup",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-20T14:56:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "544cd2fd3ce28f4b7035d5872894273947da46e0",
"body": null,
"is_bot": false,
"headline": "Merge branch 'master' into rubocop-cleanup",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-20T14:55:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ec21593b0003a250bf59b1b787c5e7cb30892a8",
"body": "…-1.0\n\nUpdate simplecov requirement from ~> 0.22 to ~> 1.0",
"is_bot": false,
"headline": "Merge pull request #65 from 0llirocks/dependabot/bundler/simplecov-tw…",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-17T11:39:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5a07407ddf5512a8428acb24f30fe6c5c6af22b",
"body": "Updates the requirements on [simplecov](https://github.com/simplecov-ruby/simplecov) to permit the latest version.\n- [Release notes](https://github.com/simplecov-ruby/simplecov/releases)\n- [Changelog](https://github.com/simplecov-ruby/simplecov/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/\n[…]\nare/v0.22.0...v1.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: simplecov\n dependency-version: 1.0.0\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Update simplecov requirement from ~> 0.22 to ~> 1.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T15:46:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b7195ecf81c3b186c0c23221d890708afad99077",
"body": "Enable Style/FrozenStringLiteralComment and add the magic comment to every\nfile, so string literals are frozen -- avoiding per-call allocations on the\nhot scoring path. This also removes the now-redundant `.freeze` on VERSION.\n\nEnabling it surfaced a latent bug: Cvss40CalcHelper#concat_and_stringify\n[…]\nnt output, no mutation. A grep confirmed this was the\nonly in-place string mutation in lib/. The full 81,132-example suite passes.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf: freeze string literals across the gem",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-09T15:49:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3aa067d05cefb1cfb58a6cf1a994ba0e52dd6407",
"body": "Naming/AccessorMethodName flags the set_ writer prefix. These are command\nmethods (they mutate selection state), not attribute writers, so rename to\nmark_selected(abbreviation) and mark_default -- both only have internal\ncallers (cvss_metric.rb), so this is a v5-appropriate public-API tidy.\n\nRegener\n[…]\nay), leaving only the inherent-complexity Metrics maxes --\nand the environmental refactor tightened Metrics/AbcSize from 28 to 25.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: rename set_selected_value/set_default_value to idiomatic verbs",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-09T15:40:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "17cbc943914ce23a35070abb28536b76393d6a9a",
"body": "It returns a boolean and is private with a single caller, so Naming/PredicateMethod applies cleanly -- rename it and drop the todo exclude rather than grandfather it.",
"is_bot": false,
"headline": "style: rename check_metrics_validity to the predicate metrics_valid?",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-09T15:34:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f516b94be055a920dd8e477671040d9dd02e0717",
"body": "…ssions\n\nThe environmental score methods repeated the same \"use the modified metric,\nbut fall back to the base metric when it is Not Defined\" block eight times,\nand duplicated the modified-vs-base scope decision across modified_impact_sub\nand calculate_score. Two private helpers -- merged(modified, \n[…]\nl -- the full 81,132-example suite passes unchanged, and\neach version keeps its own impact formula (v3.0 **15; v3.1 *0.9731 **13).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: DRY up v3/v3.1 environmental scoring, dropping Style suppre…",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-09T15:30:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "28d32d79c095228d0f45e6d563062b56dfb6cb1a",
"body": "Move dev dependencies to a Gemfile :development group so Gemspec/DevelopmentDependencies passes on its default (Gemfile) style, instead of grandfathering the cop with a whole-file exclude. The gemspec keeps only the runtime bigdecimal dependency; the gemspec directive in the Gemfile still exposes it to bundler. Fixup to be squashed into the cop-enablement commit before merge.",
"is_bot": false,
"headline": "fixup! style: enable RuboCop new cops and apply safe autocorrections",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-09T15:06:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86548cd95592ac15ac01823da2a14cc02d4bf159",
"body": "Flip NewCops to enable and run `rubocop -A`, adopting the safe corrections\nfrom cops added since 1.50 -- mostly precedence-clarifying parentheses in the\nscore math, a few idiom updates (to_h, max, empty-literal), and the\nMFA-required gem metadata that Gemspec/RequireMFA adds. Behaviour is\nunchanged;\n[…]\ns\nare inherently-complex scoring formulas, and the Naming renames are public-API\nchanges better made deliberately in the v5 major.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: enable RuboCop new cops and apply safe autocorrections",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-09T14:54:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "30fe4152fb32bfbce0cc614c9dfe9b3feb2109c5",
"body": "…ns/checkout-7\n\nBump actions/checkout from 5 to 7",
"is_bot": false,
"headline": "Merge pull request #63 from 0llirocks/dependabot/github_actions/actio…",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-09T08:09:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecbac6c6b9ec2dca888dd35e16dc111ba1418219",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v5...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 5 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-09T07:38:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4e48998232d47c2a1a42f88c6cfe4606b6180fda",
"body": "Require Ruby >= 3.3 and modernize toolchain (v5 baseline)",
"is_bot": false,
"headline": "Merge pull request #62 from SeanLF/v5-foundation",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-09T07:37:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf6106ca892157a66d8fe0e5a8e9366f2978aa08",
"body": "Raise the minimum Ruby to 3.3, the oldest release still receiving security\nfixes (3.2 reached EOL 2026-03-31). A vulnerability-scoring gem shouldn't\nimplicitly bless unpatched runtimes; this is the deliberate breaking change\nthat defines v5. Laggards keep the 4.x line.\n\nRuboCop 1.50.2 no longer runs\n[…]\n broke CI on modern Bundler.\n\nTrusted publishing and release tagging are the maintainer's; push.yml and the\nversion are untouched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "build: require Ruby >= 3.3 and modernize toolchain for v5",
"author_name": "Sean Floyd",
"author_login": "SeanLF",
"committed_at": "2026-07-09T00:34:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "730d7c2e6dd846437475a134cacd45b7e0dcd88c",
"body": null,
"is_bot": false,
"headline": "Fix rubocop",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-05T09:29:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa99d397ce21ce6d1cea4af633ce809f391b1607",
"body": null,
"is_bot": false,
"headline": "Add bundler release tasks",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-05T09:26:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f7d324f0055166bbe1b1ecea9de4e886cc7adf1",
"body": null,
"is_bot": false,
"headline": "Update bundler version in GitHub Actions workflow",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-05T09:00:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87836c945acc84c60f657de66bcce4a489ddfa33",
"body": null,
"is_bot": false,
"headline": "Bump version to 4.1.4",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-05T08:40:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "401d93aa9231c44a6669fbd5ae1dee1fdce47d5e",
"body": null,
"is_bot": false,
"headline": "Update changelog URI to point to releases",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-05T08:39:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2e4073e4aea831e6e1fc35167e1b92caba4c999",
"body": "Updated CHANGES.md to indicate version 5.0.0 changes are documented on the Releases page.",
"is_bot": false,
"headline": "Update changelog documentation for version 5.0.0",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-05T08:37:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12383aebb518226a6d30a6a1c207568eaacda415",
"body": "Add GitHub Action to publish gem to RubyGems on release",
"is_bot": false,
"headline": "Merge pull request #61 from 0llirocks/push-gem-on-release",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-05T08:28:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26a45a49a46a4213cad0689c055fc0f38126c822",
"body": null,
"is_bot": false,
"headline": "Merge pull request #60 from Bo98/bigdecimal-4.0",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-07-05T08:03:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b65eca92706196e929ec5261ab69308a019505a3",
"body": null,
"is_bot": false,
"headline": "Support BigDecimal 4.0",
"author_name": "Bo Anderson",
"author_login": "Bo98",
"committed_at": "2026-05-19T04:07:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b682c8f2c46ce538db9954399ac5026d87f86e1",
"body": null,
"is_bot": false,
"headline": "Create push.yml",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-04-28T08:49:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31ec5709fe56f53fe494f379431efaa18c67228e",
"body": null,
"is_bot": false,
"headline": "Update version",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-04-26T14:29:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51e0aa3edacd115c4e592e51e0d3394dbfdd51aa",
"body": null,
"is_bot": false,
"headline": "Update contributor list in LICENSE.md",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-04-26T14:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e50ed5d1d2941fb68fc6fc16be009a2e973ef59f",
"body": null,
"is_bot": false,
"headline": "Add Ruby 4.0 to the CI matrix",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-04-26T14:24:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e704da59823a00f6d5661d2b1525846af772bb7",
"body": "Fixes score discrepency due to temporal and environmental metric",
"is_bot": false,
"headline": "Merge pull request #59 from sachin-sandhu/ssandhu/fix-cvss-score-3-1",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2026-04-26T14:21:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c379cf661a08c1591494104f9c53c4781379556",
"body": null,
"is_bot": false,
"headline": "Fix RuboCop offenses: normalize variable numbers and line lengths",
"author_name": "sachin-sandhu",
"author_login": "sachin-sandhu",
"committed_at": "2026-03-11T19:56:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "401b67b31c79a1542f65b51ae095fa8304206697",
"body": null,
"is_bot": false,
"headline": "Fixes score discrepency due to temporal and environmental metric",
"author_name": "sachin-sandhu",
"author_login": "sachin-sandhu",
"committed_at": "2026-03-11T19:35:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edb1c04b807a0d9d85e7cce094f3a65511f44436",
"body": null,
"is_bot": false,
"headline": "Update version",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-12-05T18:19:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "030075dae72e1ee32e8d24313ef0e2a520b71900",
"body": null,
"is_bot": false,
"headline": "Update dependency to allow bigdecimal smaller than 4.x",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-12-05T18:16:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48ed3df0d28f082bd0f96784ec1dfa5b7527a4ca",
"body": "…rsion-constraints\n\nRelaxes bigdecimal dependency to allow for greater versions",
"is_bot": false,
"headline": "Merge pull request #57 from sachin-sandhu/ssandhu/relax-bigdecimal-ve…",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-12-05T18:13:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8adffdda9ec57aa5df1fde5a23cc82df9379cd30",
"body": null,
"is_bot": false,
"headline": "relaxes bigdecimal dependency to allow for greater versions",
"author_name": "Sachin Sandhu",
"author_login": "sachin-sandhu",
"committed_at": "2025-12-05T01:02:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dbb1bbe7679c94ea0e656a69eb3d3ef39e90219",
"body": null,
"is_bot": false,
"headline": "Set version to 4.1.1",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-05-11T09:00:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c0e42c61a477508089859e6a6eda54a2cb4dcbc",
"body": "Bug: Impact calculation can be > 10",
"is_bot": false,
"headline": "Merge pull request #55 from jgarber-cisco/impact-calculation-again",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-05-11T08:53:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "694a8a8ba6a4555a230cba68a6da34bcababe014",
"body": "Python's cvss module uses all Digit numbers to avoid floating-point errors. I didn't want to switch everything and pay the computational cost, but a few surgical uses of BigDecimal empirically resolves floating-point errors.",
"is_bot": false,
"headline": "Fix some floating-point errors",
"author_name": "Jason Garber",
"author_login": "jgarber-cisco",
"committed_at": "2025-05-07T19:11:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe419fe2abd3e1e7d0fb47f68beb42bb8c49e9bd",
"body": null,
"is_bot": false,
"headline": "Add the csv gem for Ruby 3.4",
"author_name": "Jason Garber",
"author_login": "jgarber-cisco",
"committed_at": "2025-05-06T03:24:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7764248b102e0e88fd01ac4c9753e5d30edf053",
"body": null,
"is_bot": false,
"headline": "Rubocop fix",
"author_name": "Jason Garber",
"author_login": "jgarber-cisco",
"committed_at": "2025-05-06T03:22:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4763641bcf25a2456582271760d6685e551859b1",
"body": null,
"is_bot": false,
"headline": "Fix loss of environmental score ceiling of 10.",
"author_name": "Jason Garber",
"author_login": "jgarber-cisco",
"committed_at": "2025-05-06T03:04:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "131593b0e62ab8d7e6fe23d2a4bf934fbba5336a",
"body": null,
"is_bot": false,
"headline": "Merge branch '51-fix-v3-rounding' into impact-calculation-again",
"author_name": "Jason Garber",
"author_login": "jgarber-cisco",
"committed_at": "2025-05-05T21:02:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e6f23a2e68965bcbd0a69ba62dde452c8446a16",
"body": null,
"is_bot": false,
"headline": "Fix v2 subscore rounding as well",
"author_name": "Jason Garber",
"author_login": "jgarber-cisco",
"committed_at": "2025-05-05T20:58:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f64105a0f6d54f306fbd0fc588513c6ea5e1a6ef",
"body": null,
"is_bot": false,
"headline": "Don't round impact and exploitability subscores.",
"author_name": "Jason Garber",
"author_login": "jgarber-cisco",
"committed_at": "2025-05-05T20:49:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b2f19a70bf643053af070375da737f33f2eb0ed",
"body": null,
"is_bot": false,
"headline": "Derive CVSS v2 severity from the base score. Fixes #50",
"author_name": "Jason Garber",
"author_login": "jgarber-cisco",
"committed_at": "2025-05-05T20:20:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc7f8ace9e713e5eb035c0d4b1da88daa7f57170",
"body": "Fix #49 v2 impact calculation is wrong",
"is_bot": false,
"headline": "Merge pull request #52 from 0llirocks/49-v2-impact-calculation-is-wrong",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-05-03T08:14:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31290d6a62d1adc6f5d39c1abff6b6ed4e498356",
"body": null,
"is_bot": false,
"headline": "Fix rubocop",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-05-03T07:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97b642d12f42a39046b6d9464e691f6a334bc900",
"body": null,
"is_bot": false,
"headline": "Fix max score for cvss 2 impact from 10 to 10.41",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-05-03T07:41:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "995ebd95ba4186a70d983d6b8c94ba51c8e5c963",
"body": null,
"is_bot": false,
"headline": "Add test for #49",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-05-03T07:40:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90f95675283d63f5eb61d91a34c4ea163312eec1",
"body": null,
"is_bot": false,
"headline": "Fix typo",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-05-03T07:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fce62ac7019261a28f521051c78b061b4a71342",
"body": null,
"is_bot": false,
"headline": "Add disclaimer for maintainers",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-05-03T07:12:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d71b3bd56580846f0ffb72afa2e7391313fb19a",
"body": null,
"is_bot": false,
"headline": "Set version to 4.1.0",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-04-27T08:53:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74dc142bd9c8eff33e542aeccfc158f80bca8712",
"body": "Expose impact and exploitability sub-scores",
"is_bot": false,
"headline": "Merge pull request #48 from jgarber-cisco/make-subscores-accessible",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-04-27T08:51:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bd0e83aefddf7e5459a2aa5638cee7bb24986fb",
"body": null,
"is_bot": false,
"headline": "Expose public, rounded impact and exploitability sub-scores.",
"author_name": "Jason Garber",
"author_login": "jgarber-cisco",
"committed_at": "2025-04-16T03:27:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "956b5ff176ca05ea365724ea453d2554dc6dce0b",
"body": null,
"is_bot": false,
"headline": "Add ruby 3.4 to rspec workflow",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2025-01-14T08:50:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2c453f03e4060f2246db865cdfeae80b00fabd7",
"body": null,
"is_bot": false,
"headline": "Add note for version 3.x",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-31T15:31:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae38aeb00f5a7682b078909750b80efaa6c16ff0",
"body": null,
"is_bot": false,
"headline": "Add version 4.0.0",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-31T15:24:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3676e990b2a078b8cfe997d569693c096ff7f986",
"body": null,
"is_bot": false,
"headline": "Fix comment",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-31T15:18:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a12359751399e3d58ef4c1794899344ba1edc23a",
"body": null,
"is_bot": false,
"headline": "Update reader attributes for cvss 4",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-31T15:18:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a87d04240695ab4d5d5f8046a72a74e763e8316",
"body": null,
"is_bot": false,
"headline": "Remove score method from all cvss 4 metrics",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-31T15:18:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b33cfb5cd7ab25be6c2b6f16a9479ae3e36bf51",
"body": null,
"is_bot": false,
"headline": "Add version 3.3.0",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-31T15:05:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45e5dcae20a502950d851e02863c27f1bf7fe8dc",
"body": null,
"is_bot": false,
"headline": "Add score method for cvss v4",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-31T14:58:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59f8bd9058807643831105e20e1c0a7356799b0f",
"body": null,
"is_bot": false,
"headline": "Run rubocop -a",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-31T14:42:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11aed0bc810aab5745a2922ef0271148ba700bb2",
"body": null,
"is_bot": false,
"headline": "Enable warnings by default for rspec",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-31T14:41:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "537e9ed4a45f0fe70dff20d3d89b957805e34257",
"body": "Update strings for frozen string compatibility",
"is_bot": false,
"headline": "Merge pull request #47 from HParker/make-compatible-with-frozen_strings",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-30T16:24:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db2548a6ff807b0cc47d6ae597cc08fc9d2d5cc9",
"body": "In the future Ruby will warn for when mutating strings that are not marked as mutable.\nYou can find and fix these warnings by specifying RUBYOPT=\"--enable-frozen-string-literal\"\nand fixing the errors that appear.\n\nThis PR updates cvss to pass all tests with that option enabled.",
"is_bot": false,
"headline": "Update gem for frozen string compatibility",
"author_name": "Adam Hess",
"author_login": "HParker",
"committed_at": "2024-08-19T21:27:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4eb7575ccd5853d9e5beed8097bb799545f0c7c1",
"body": null,
"is_bot": false,
"headline": "Set version to 3.2.2",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T16:38:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dec6094a32f54b5c216810a349a7b10bf3da6e8",
"body": null,
"is_bot": false,
"headline": "Add changelog",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T16:38:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c06d39f70eb4f8019b421d70a90d979db3e70d2",
"body": null,
"is_bot": false,
"headline": "Change code of conduct to only reference to license file",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T16:37:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94809d1914e6896e1ce2c03ca08fcb33ff8a61fa",
"body": null,
"is_bot": false,
"headline": "Update license",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T16:32:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2388e3c6474dc986c5a81140d96a17d1b5749b1",
"body": null,
"is_bot": false,
"headline": "Add test cases for empty metric value",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T16:27:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3d10c91ad0dad0bd7861f860941a7deceb86959",
"body": "Add validation",
"is_bot": false,
"headline": "Merge pull request #43 from 0llirocks/add-validation",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T16:24:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "160313d51f29b72946f3f8ea05f0a0b338eafc89",
"body": null,
"is_bot": false,
"headline": "fix rubocop",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T16:19:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9332c6d3fa60f84f4e5a8e50ec82f83dac136aaa",
"body": null,
"is_bot": false,
"headline": "cvss2 must always start with AV, changed test case",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T16:11:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6a59922e6773cc9ff9ef83fd9badc4b48ab2367",
"body": null,
"is_bot": false,
"headline": "Add test cases for incorrect values",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T16:08:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "346fd6bfe61e2fc30f6fc510548d0fe3c5794a31",
"body": null,
"is_bot": false,
"headline": "Add check for incorrect values in string",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T16:07:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e33db16cb9ac97e588fb757e584646c8ce7c0e4a",
"body": null,
"is_bot": false,
"headline": "Fix rubobop",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T13:26:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d888d0eddd41adce0e4e831f9eabea47a6034ad",
"body": "Add extra CVSS vector validations for 3.1 and lower",
"is_bot": false,
"headline": "Merge pull request #42 from kghandour/master",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-08-04T13:15:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c570aa2e3189d1e6455ef8ffc3d79c34d6c242c",
"body": null,
"is_bot": false,
"headline": "Fix styling",
"author_name": "Karim Ashraf Huss Elghandour",
"author_login": null,
"committed_at": "2024-07-30T11:34:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72ddeaf6d473c74c5dd9ad9ff38991584cc6ece2",
"body": null,
"is_bot": false,
"headline": "Add validation for slashes and invalid abbrev.",
"author_name": "Karim Ashraf Huss Elghandour",
"author_login": null,
"committed_at": "2024-07-30T11:19:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63f766d2ce68dc8097119bab839859d54dde1e33",
"body": null,
"is_bot": false,
"headline": "Update to version 3.2.1",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-05-25T06:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c53481e0ecf6434c50323db709ea24e029313820",
"body": "drop string extension to not pollute methods",
"is_bot": false,
"headline": "Merge pull request #38 from brphelps/dont-pollute-truncate-method",
"author_name": "0llirocks",
"author_login": "0llirocks",
"committed_at": "2024-05-25T06:36:37Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 11,
"commits_last_year": 53,
"latest_release_at": "2026-07-05T09:27:18Z",
"latest_release_tag": "v4.1.4",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 9,
"days_since_latest_release": 22,
"mean_days_between_releases": 88
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 71,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "cvss-suite",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "rubygems",
"matches_repo": true,
"registry_url": "https://rubygems.org/gems/cvss-suite",
"is_deprecated": false,
"latest_version": "4.1.4",
"repository_url": "https://github.com/0llirocks/cvss-suite",
"versions_count": 33,
"total_downloads": 23582504,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2016-04-15T16:43:40.630000Z",
"latest_published_at": "2026-07-05T09:27:39.178000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 22
}
]
},
"popularity": {
"forks": 20,
"stars": 27,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2018-02-06",
"count": 1
},
{
"date": "2018-08-31",
"count": 1
},
{
"date": "2018-11-27",
"count": 1
},
{
"date": "2019-11-28",
"count": 1
},
{
"date": "2020-06-21",
"count": 1
},
{
"date": "2020-10-14",
"count": 1
},
{
"date": "2022-09-28",
"count": 2
},
{
"date": "2023-11-28",
"count": 1
},
{
"date": "2024-04-15",
"count": 1
},
{
"date": "2024-05-30",
"count": 1
},
{
"date": "2024-07-30",
"count": 1
},
{
"date": "2024-08-19",
"count": 1
},
{
"date": "2025-04-16",
"count": 1
},
{
"date": "2025-10-14",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
},
{
"date": "2026-03-11",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-07-03",
"count": 1
}
],
"complete": true,
"collected": 19,
"total_forks": 20
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 17401,
"source_files_sampled": 47,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Gemfile"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 7,
"direct_affected_count": 0
},
"ecosystems": [
"rubygems"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "bigdecimal",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "csv",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rake",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rspec",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rspec-its",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "rubocop",
"direct": false,
"version": null,
"ecosystem": "rubygems"
},
{
"name": "simplecov",
"direct": false,
"version": null,
"ecosystem": "rubygems"
}
],
"collected": true,
"truncated": false,
"total_count": 7,
"direct_count": 0,
"indirect_count": 7
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 42,
"open_issues": 1,
"closed_ratio": 0.964,
"closed_issues": 27,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "0llirocks",
"commits": 202,
"avatar_url": "https://avatars.githubusercontent.com/u/4518617?v=4"
},
{
"type": "User",
"login": "SeanLF",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/7193989?v=4"
},
{
"type": "User",
"login": "fwininger",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/4974759?v=4"
},
{
"type": "User",
"login": "brphelps",
"commits": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/10023676?v=4"
},
{
"type": "User",
"login": "jgarber-cisco",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/122489457?v=4"
},
{
"type": "User",
"login": "adamrdavid",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/1854876?v=4"
},
{
"type": "User",
"login": "sachin-sandhu",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/167903774?v=4"
},
{
"type": "User",
"login": "HParker",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/4482399?v=4"
},
{
"type": "User",
"login": "noraj",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/16578570?v=4"
},
{
"type": "User",
"login": "Bo98",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1190754?v=4"
}
],
"contributors_sampled": 11,
"top_contributor_share": 0.765
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"push.yml",
"rspec.yml",
"rubocop.yml"
],
"has_docs_dir": true,
"linter_configs": [
".rubocop.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "71cb5ce947b0cc05efcdf047899d4756088df39b",
"ran_at": "2026-07-27T18:21:33Z",
"aggregate_score": 6.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T15:45:54Z",
"oldest_open_prs": [
{
"number": 75,
"created_at": "2026-07-27T15:13:28Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-25T05:06:52Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 74,
"created_at": "2026-07-23T16:31:58Z",
"last_comment_at": "2026-07-27T15:14:14Z",
"last_comment_author": "SeanLF"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/0llirocks/cvss-suite",
"host": "github.com",
"name": "cvss-suite",
"owner": "0llirocks"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"security": 66,
"vitality": 78,
"community": 61,
"governance": 65,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 78,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"commits_last_year": 53,
"human_commit_share": 0.97,
"days_since_last_push": 2,
"active_weeks_last_year": 9
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "9/52 weeks with commits",
"points": 6.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 9
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "53 commits in the last year",
"points": 15.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 53
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 92,
"inputs": {
"releases_count": 11,
"latest_release_tag": "v4.1.4",
"releases_from_tags": false,
"days_since_latest_release": 22,
"mean_days_between_releases": 88
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "11 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 11
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 22 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 22
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~88 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 88
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 2,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 2 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 2
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 61,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"forks": 20,
"stars": 27,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "27 stars",
"points": 23,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 27
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "20 forks",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 20
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 96,
"inputs": {
"packages": [
"cvss-suite"
],
"dependents": null,
"ecosystems": "rubygems",
"total_downloads": 23582504,
"monthly_downloads": null
},
"components": [
{
"key": "total_downloads",
"name": "Total downloads",
"detail": "23,582,504 downloads all-time across rubygems",
"points": 76.6,
"status": "partial",
"details": [
{
"code": "downloads_total",
"params": {
"count": 23582504,
"ecosystems": "rubygems"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 65,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 11,
"top_contributor_share": 0.765
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 76% of commits",
"points": 5.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 76
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "11 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 11
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 95,
"inputs": {
"merged_prs": 42,
"open_issues": 1,
"closed_issues": 27,
"issue_closed_ratio": 0.964,
"closed_unmerged_prs": 4
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "96% of issues closed",
"points": 45.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 96
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "42/46 decided PRs merged",
"points": 34.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 42,
"decided": 46
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"followers": 3,
"owner_type": "User",
"is_verified": null,
"owner_login": "0llirocks",
"public_repos": 7,
"account_age_days": 4812
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of 0llirocks",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "0llirocks"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "7 public repos, account ~13 yr old",
"points": 18.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 7
}
},
{
"code": "account_age_years",
"params": {
"years": 13
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"cvss-suite"
],
"ecosystems": "rubygems",
"any_deprecated": false,
"min_days_since_publish": 22
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on rubygems",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "rubygems"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 22 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 22
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "33 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 33
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".rubocop.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"security",
"cvss",
"ruby-gem"
],
"has_wiki": false,
"homepage": "https://cvss-suite.0lli.rocks",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://cvss-suite.0lli.rocks",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "3 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 3
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 66,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 6.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 13
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 43,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.464,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "45 of 97 human commits state their intent (structured subject or explanatory body)",
"points": 24.7,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 45,
"sampled": 97
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.15,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.03
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".rubocop.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "15 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 15,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "3 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Ruby",
"largest_source_bytes": 17401,
"source_files_sampled": 47,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Ruby without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Ruby"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/47 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 47,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-27T18:21:52.900235Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/0/0llirocks/cvss-suite.svg",
"full_name": "0llirocks/cvss-suite",
"license_state": "custom",
"license_spdx": null
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з 0llirocks/cvss-suite. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.
