apparentlymart/go-textseg має індекс здоров’я 53 зі 100, що відповідає смузі «Помірний». Найвищий показник — Sustainability & Governance (64/100), найнижчий — Community & Adoption (36/100). Останнє оновлення було 24 дні тому. Більшість нещодавньої роботи виконує один учасник.
53
загалом / 100
Помірний
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє зважене середнє, відкаліброване за розподілом публічного реєстру, тож діапазони мають перцентильний зміст; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 34 («У зоні ризику»).
53
Винятковий93-100Верхній щабель реєстру (≈ топ-5%); відповідає практично всім перевіреним критеріям
Відмінний80-92Сильний за всіма напрямами; незначні прогалини
Добрий65-79Здоровий; прогалини обмежені та керовані
Помірний50-64Прийнятний, але з помітними прогалинами; рекомендовано перевірку
Слабкий35-49Суттєві недоліки в кількох сферах
У зоні ризику20-34Суттєві слабкі місця; впровадження потребує обережності
Критичний1-19Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Зважений загальний бал 52 калібровано до 53 за шкалою опублікованого індексу (калібрування реєстру 2026-08-02).
Виключено з оцінювання (немає даних або не застосовно): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Залишкові ваги перенормовано.
Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
0/25
Непрямі залежності без відомих сповіщень — транзитивний набір не відокремлюється від залежностей розробки й тестування в цьому обсязі
0/40
Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
source
osv
advisories
0
affected_packages
0
assessed_packages
7
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Виключено з оцінювання (немає даних або не застосовно): Непрямі залежності без відомих сповіщень, Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено 7 резолвлених залежностей із OSV. Цей репозиторій не публікує пакета, який резолвить індекс, тож натомість оцінено граф залежностей репозиторію. Цей граф змішує закріплені версії для розробки й тестування зі справді постачаними залежностями, тож оцінюються лише задекларовані runtime-залежності; транзитивні знахідки подаються як контекст і в оцінку не входять. Досяжність не аналізується.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Має свідомо малу вагу (4%): агентний інструментарій — реальний сигнал супроводу, але репозиторій без нього все одно може отримати 100/100.
Керовані розміри файлів — 1/19 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_language
Go
largest_source_bytes
106 886
source_files_sampled
19
oversized_source_files
1
Ключові факти
14зірок GitHub
3контриб'юторів
25комітів за останні 12 місяців
24днів від останнього пушу
12релізів
1бас-фактор
0відкритих issue
Goпакетних екосистем
Попередження щодо збору даних
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Докладніше
Історія зірок і форків 0 ★ / 6 ⇿
0Зірки
6Форки
3Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 3Мінорні 0Патчі 0
Кожна точка охоплює 5 днів.
OpenSSF Scorecard 4.1 / 10
4.1сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-28 13:39 UTC
Повний розв'язаний набір залежностей із графа залежностей GitHub: 2 прямих і 5 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
Реєстр
Пакет
Версія
Зв'язок
Go
github.com/apparentlymart/go-textseg/v15
v15.0.0
пряма
Go
github.com/apparentlymart/go-textseg/v17
v17.0.0
пряма
Go
github.com/apparentlymart/go-textseg/v10
10.0.0
непряма
Go
github.com/apparentlymart/go-textseg/v11
11.0.0
непряма
Go
github.com/apparentlymart/go-textseg/v12
12.0.0
непряма
Go
github.com/apparentlymart/go-textseg/v13
13.0.0
непряма
Go
github.com/apparentlymart/go-textseg/v9
9.0.0
непряма
Сповіщення про залежності 0
Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 7 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 0 мають відомі сповіщення, з них 0 прямі.
Жодне відоме сповіщення не стосується оцінених залежностей.
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 808,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 162999
},
"pushed_at": "2026-07-04T01:11:35Z",
"created_at": "2017-05-14T17:46:40Z",
"owner_type": "User",
"updated_at": "2026-07-04T01:11:16Z",
"description": "Go implementation of Unicode Text Segmentation",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "http://martin.atkins.me.uk/",
"name": "Martin Atkins",
"type": "User",
"login": "apparentlymart",
"company": null,
"location": "Portland, OR",
"followers": 1475,
"avatar_url": "https://avatars.githubusercontent.com/u/20180?v=4",
"created_at": "2008-08-10T13:33:03Z",
"is_verified": null,
"public_repos": 300,
"account_age_days": 6561
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v17.0.1",
"kind": "patch",
"published_at": "2026-07-04T01:11:04Z"
},
{
"tag": "v17.0.0",
"kind": "major",
"published_at": "2026-07-03T18:24:16Z"
},
{
"tag": "v16.0.2",
"kind": "patch",
"published_at": "2026-07-03T17:53:18Z"
},
{
"tag": "v16.0.1",
"kind": "patch",
"published_at": "2026-07-03T00:55:33Z"
},
{
"tag": "v16.0.0",
"kind": "major",
"published_at": "2024-10-13T23:36:26Z"
},
{
"tag": "v15.0.0",
"kind": "major",
"published_at": "2023-08-29T15:35:34Z"
},
{
"tag": "v13.0.0",
"kind": "major",
"published_at": "2021-02-22T23:45:06Z"
},
{
"tag": "v12.0.0",
"kind": "major",
"published_at": "2020-03-06T20:17:36Z"
},
{
"tag": "v11.0.0",
"kind": "major",
"published_at": "2020-03-06T20:12:16Z"
},
{
"tag": "v10.0.0",
"kind": "major",
"published_at": "2020-03-06T20:04:03Z"
},
{
"tag": "v9.0.0",
"kind": "major",
"published_at": "2020-03-06T19:54:49Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2018-08-15T02:43:44Z"
}
],
"recent_commits": [
{
"oid": "78a09841d57644bc59d8ee264e830b8cbfd83262",
"body": "The logic here was incorrectly requesting more input in some cases even\nif we know we're at EOF and therefore no new data can be coming.\n\nNow we'll treat truncated input as a split point when we're at EOF, so that\nwhatever remains can be treated as invalid and consumed byte-by-byte.",
"is_bot": false,
"headline": "ScanGraphemeClusters must not request more data at EOF",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-04T01:11:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c16b983f0daf537e76ad8267477c8ba14db2a9f",
"body": "These older versions were here for the benefit of older versions of Go, but\nsince the Go toolchain now forces us to ratchet this module's minimum\nsupported Go version to the largest required version of all of our\ndependencies regardless of conditional compilation this library can no\nlonger support G\n[…]\nest\nversion of Go that's under security support anyway and so anyone relying\non earlier versions should either plan to upgrade soon or use earlier\nversions of this autoversion library in the meantime.",
"is_bot": false,
"headline": "autoversion: Drop support for Unicode 9 through 13",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T18:47:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e990c0c8cba3e26efade62d4acb729d27f48ade",
"body": "Unfortunately because the modern Go toolchain forces ratcheting up each\nmodule's Go version to be at least as high as the highest version required\nby a dependency, this module can no longer support Go 1.25 or earlier\ndespite using conditional compilation. The rule that enforces the minimum\nsupported\n[…]\nactice all\nof the major callers of this library just directly import a specific major\nversion instead of relying on autoversion anyway, and so this autoversion\nmechanism might be deprecated in future.",
"is_bot": false,
"headline": "autoversion: Go 1.27 uses Unicode 17",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T18:41:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "76ec8e6849c9c795bd85fd28dfb39778e89a71ab",
"body": "The earliest versions of this library worked in quite a different way and\nused some helper functions that I ended up exporting, but none of them are\nused by this library's own code anymore and they are not really directly\nrelated to this library's mission, so they're removed now prior to the\nfirst r\n[…]\n were depending on these functions from\nan earlier major version, you're welcome to copy those small utility\nfunctions from an earlier major version into your own codebase under the\nMIT license terms.",
"is_bot": false,
"headline": "Remove obsolete symbols",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T18:24:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e26a4f0a9a009b32d35b1a68779c2be1beeb12f7",
"body": "Unicode 17 only changes some of the assigned character properties while\nretaining the same segmentation algorithm, so all that's needed in this\ncase is to regenerate the property lookup tree from the latest data files.",
"is_bot": false,
"headline": "Update for Unicode 17",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T18:16:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77ffdd0cb21ebfec817e549a42820579be29316c",
"body": "Previously we used code generation to derive static Go data structures from\nthe test data provided in the Unicode Character Database.\n\nNow we'll just parse the relevant file from the Unicode Character Database\ndirectly inside the test, without a separate code generation step. This\nkeeps things simpl\n[…]\novered by the MIT license (the hand-written Go code)\nand what is owned by Unicode consortium and redistributed under their own\nlicense (the data files and the static tree structure derived from them).",
"is_bot": false,
"headline": "Simplify the use of the Unicode-provided test cases",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T17:53:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b6d7bfcac56303e31fd1565c17dc5a84aeebe6a7",
"body": "These were from a very old version of this library before it began using\na state machine for analysis. Until recently they were still used to\nproduce debug information in tests, but the previous commit removed that\nlast usage so we can now remove this entirely.\n\nThe test tables still remain, though \n[…]\no simplify the handling of\nthose in a future commit too since they are overly general for this library\nwhich only actually handles grapheme cluster segmentation, and not word\nor sentence segmentation.",
"is_bot": false,
"headline": "Remove legacy character range tables",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T17:06:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1fcf3447a18ead9ca1156dfd82a1001d4f4cdf1b",
"body": "Previously we used the _GraphemeRuneType function generated as part of\nthe legacy file of unicode range tables for the different properties, but\nwe've not been using those tables at runtime (outside of tests) for a long\ntime now, and we now have a simpler function for looking these up based\non a tree data structure.\n\nThis is preparation for the removal of the legacy tables in a future\ncommit.",
"is_bot": false,
"headline": "Use charprops.LookupFirstChar for debug output in tests",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T17:01:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6eb83f8b1f4a2fd4767b31951a2bdf3e5a687c4d",
"body": "Now that charprops.LookupFirstChar can do its own UTF-8 validation (due to\nthe parent commit) we no longer need to use ScanUTF8Sequences to\nredundantly tokenize the UTF-8 sequences in the buffer.\n\nScanUTF8Sequences will be removed in a future major release but is retained\nas a deprecated function for now to avoid making a breaking change in the\nv16 series.",
"is_bot": false,
"headline": "ScanGraphemeClusters simplification",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T16:48:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f47aefb0941c0872527cbb78b12ad8155d3dc8a",
"body": "Previously LookupFirstChar assumed it would always be given valid input\nbecause the code in package textseg was using the preexisting function for\nscanning UTF-8 sequences first and only passing successfully-scanned chunks\ninto this function.\n\nBut it'll now do its own error handling, so that in a fu\n[…]\nt of of the information required to do\nvalidation for its own purposes anyway, and this approach also avoids\nwasting time turning the UTF-8 sequence into a rune value that we wouldn't\nbe using anyway.",
"is_bot": false,
"headline": "charprops: LookupFirstChar does its own error handling",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T16:10:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1fb5795c8ef902b7fac6aa16bdb9a0d625818724",
"body": null,
"is_bot": false,
"headline": "charprops: String representations and error values",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T15:46:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcae31aac13caceb9603067d01b130bad4b686a9",
"body": "This library was originally written for an earlier version of Unicode where\nthe grapheme cluster ruleset was more complicated and so it was easier to\ndescribe it as a Ragel state machine instead of hand-writing it.\n\nHowever, subsequent versions of Unicode have gradually simplified this, and\nin Unico\n[…]\nnty and questioning from organizations that are unfamiliar with the\nUnicode license and concerned about the hybrid licensing situation here.\n\nThis work was sponsored in part by Spacelift, Inc. Thanks!",
"is_bot": false,
"headline": "New implementation of the Unicode 16 grapheme cluster algorithm",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T00:55:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "49e52942d888b8856d14ed686884c75671c21626",
"body": "The previous test just always provided the entire buffer at once, which\nmeant wasn't testing any of the codepaths which need to request more bytes\nbefore they can answer.\n\nThis new test uses a special reader that only produces one byte at a time,\nas a worst-case scenario for e.g. streaming data arriving over a socket\nas a human is typing into an SSH session.",
"is_bot": false,
"headline": "textseg: Test ScanGraphemeClusters with partial input",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T00:47:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f07adc8a25ad73731c6b6826d1e7eed509c0184",
"body": null,
"is_bot": false,
"headline": "Update docs for modern godoc syntax and deprecate off-topic symbols",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T00:33:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d312646c85b1eff035bf013209016f57298a4863",
"body": "In my first attempt at this I forgot that by the time this loop begins\nwe've already determined the properties for the first character and so we\nneed to deal with the initial state transition caused by those before we\nproceed to the subsequent characters.\n\nWith this fix, the tests are now all passing again.",
"is_bot": false,
"headline": "textseg: Perform initial transition in state machine",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T00:29:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1bb509022a5bce4539890974cea39aa3d644f89",
"body": "I got caught out here by the inconsistent naming of these properties in\nthe Unicode character database: some multi-word property names use\nunderscores to separate words while others do not, and the correct name\nfor this category is Regional_Indicator rather than RegionalIndicator.",
"is_bot": false,
"headline": "charprops: Fix Regional_Indicator property",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T00:21:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fd7fedcb2f102239afbf198266e056cd09ca4a6",
"body": "This removes all of the Ragel-generated code and the source files that\nit was built from, and instead calls into the hand-written state machine\nadded in previous commits. There are some test failures here so further\ndebugging is needed, but this is a good checkpoint to start from.\n\nI originally used\n[…]\nly to the\npoint where it's relatively easy to hand-write a state machine for it,\nand thus we can eliminate the development-time dependency on Ragel.\n\nThis work was sponsored in part by Spacelift, Inc.",
"is_bot": false,
"headline": "textseg: Begin replacing Ragel state machine with new state machine",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-03T00:11:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5a980b88a9ebbc1515bd6f0be1a3f0a006f2dca0",
"body": "The Rust library grapheme_machine includes a simple hand-written state\nmachine for the Unicode 16 grapheme cluster segmentation rules, and this\nis a direct port of that logic to equivalent Go code.\n\nThis porting work was sponsored by Spacelift, Inc.",
"is_bot": false,
"headline": "Port the state machine from my similar Rust library",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-02T23:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "537e34651ccf81c2323b99905c4f77ff9066d298",
"body": "The main remaining problem with the lookup table compaction was that it was\nmaking subslices of another slice but then also appending to the larger\nslice, thereby invalidating the subslices each time the backing array\nneeded to be extended.\n\nAs a hacky way to fix this for now we'll just start with a\n[…]\ngenerated tables.\n\nThe table lookups now produce the same results as the Unicode data files\nsuggest they should, so subsequent commits will use this to implement the\ngrapheme clustering state machine.",
"is_bot": false,
"headline": "charprops: Fix lookup table compaction (hackily)",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-02T20:51:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0444412b17e98995ee7f6b189b596c1793e712e7",
"body": "I essentially tricked myself here because I intentionally adjusted the\nrune ranges to be upper-limit-exclusive to match the usual Go standard so\nI could write loops normally, but then forgot I'd done that and wrote\nthe loops as if I hadn't made that adjustment. Whoops!\n\nThis still isn't enough to ma\n[…]\ne tests pass, but the initial tree\nconstruction now appears to be correct and the remaining problems are in\nthe subsequent tree compaction step, since the tests are all passing on\nan uncompacted tree.",
"is_bot": false,
"headline": "charprops: Fix off-by-one errors in rune loops",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-02T19:55:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae021400905022ff25e3a1ab09dece10e4e4ad10",
"body": "This now cross-checks against the Unicode Character Database files to make\nsure the results from our pregenerated tree match what those data files\nsuggest. Quite a few are not succeeding, suggesting that the tree generator\nis not producing correct data.",
"is_bot": false,
"headline": "charprops: Additional tests demonstrating the current misbehavior",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-02T18:14:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5265e67a07296cf3baa74bf90d270694d9380e9f",
"body": "This isn't working quite right yet, but this is a reasonable checkpoint to\nstop at before debugging further.\n\nThis work was sponsored in part by Spacelift, Inc.",
"is_bot": false,
"headline": "Initial work on generating a property lookup table",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-02T01:23:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b1742a6b6eeb0437470880a86b0711397b5b2a8",
"body": "In preparation for taking a new, simpler approach to grapheme cluster\nsegmentation for Unicode 16, this is a simple scanner for the Unicode\nCharacter Database file format, which in subsequent commits I'll use as\npart of building a category lookup data structure.\n\nThis also brings the relevant Unicod\n[…]\nh the Unicode License permitting their use and\ndistribution, so that a future commit can avoid depending on the Unicode\nwebsite for code generation.\n\nThis work was sponsored in part by Spacelift, Inc.",
"is_bot": false,
"headline": "charprops: Scanner for Unicode Character Database files",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-07-01T20:23:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "97632fde352ebc0f44df97cbd3e9a4938373140c",
"body": "This makes the autoversion package compatible with Go 1.26, whereas before\nit would've failed at compile time.",
"is_bot": false,
"headline": "autoversion: Go 1.26 still uses Unicode 15",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2026-02-23T18:02:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ac4daf7490c598819ef77402d723906af17bacc",
"body": null,
"is_bot": false,
"headline": "autoversion: Go 1.25 still uses Unicode 15.0.0",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2025-08-22T16:37:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "746d4e95fcc2d36abb720d3e78ecaf24028c6fa5",
"body": null,
"is_bot": false,
"headline": "autoversion: Go 1.24 still uses Unicode 15.0.0",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2025-02-24T23:40:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ac108b91eb0099f1123d0a4b05d813ab46e625f",
"body": "Both of these Go releases still use Unicode 15, so we'll just update the\nbuild constraints to exclude Go 1.24 and later since we don't yet know\nwhat version of Unicode that will use.",
"is_bot": false,
"headline": "autoversion: Update for Go 1.22 and Go 1.23",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2024-10-13T23:36:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0377bdd8e3c29c1c85e504949332a3ad58f4f15c",
"body": "No released version of Go uses this Unicode version yet, so this doesn't\ninclude any autoversion updates.",
"is_bot": false,
"headline": "Update for Unicode 16",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2024-10-13T23:28:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34c68c23a7939c8d4c6a2f8210a490fce2bb189a",
"body": null,
"is_bot": false,
"headline": "add GitHub funding metadata",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2024-10-13T23:18:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dea9513761aa45ce091d49b181a52173496d697",
"body": "Go 1.20 continued to use Unicode 13. Go 1.21 upgraded to Unicode 15, which\nmeans that there's no version of Go that uses Unicode 14.",
"is_bot": false,
"headline": "autoversion: Go 1.20 and Go 1.21 support",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2023-08-29T15:43:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72b78f42484ddc3f58858f794da1771fb9559ad0",
"body": "Unicode 15 makes no changes to the segmentation algorithm relative to\nthe last version supported by this library, Unicode 13. This commit\ntherefore updates only the character data tables.",
"is_bot": false,
"headline": "textseg: update for Unicode 15",
"author_name": "Katy Moe",
"author_login": "kmoe",
"committed_at": "2023-08-29T15:35:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45ed1d8f6fe508f8f276e09eb1a8b31363ea06c0",
"body": "Issues upstream:\n - unicode: update to version 14.0\n → https://github.com/golang/go/issues/48621\n - unicode: update to version 15.0\n → https://github.com/golang/go/issues/55079\n\nAt the moment, Unicode 15 is on the roadmap for Go 1.20, while Go 1.19\nis confirmed to still be using Unicode 13 (e.g. on Debian unstable and\nDebian testing).",
"is_bot": false,
"headline": "autoversion: Mark Go 1.17, 1.18, and 1.19 as using Unicode 13.",
"author_name": "Cyril Brulebois",
"author_login": "CyrilBrulebois",
"committed_at": "2023-08-29T15:32:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70e963ed556a7b7f79bab528d023cf4aad3ecd03",
"body": null,
"is_bot": false,
"headline": "autoversion: Switch version_agnostic to latest release.",
"author_name": "Cyril Brulebois",
"author_login": "CyrilBrulebois",
"committed_at": "2023-08-29T15:32:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "123b1856967a5b9f3219336239df046cb232d4a8",
"body": "Go 1.15 continued using Unicode 12 definitions.\nGo 1.16 introduced Unicode 13 rules.\n\nOnce upgraded to latest, callers will now be buildable on both Go 1.15 and\non Go 1.16, where previously Go 1.14 was the newest supported version.",
"is_bot": false,
"headline": "autoversion: Update for Go 1.15 and Go 1.16",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2021-02-22T23:50:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b41aa275ccaac4ccaa91729a8ee92e7eac9c728",
"body": "Unicode 13's version of UAX #29 still uses the same segmentation algorithm\nas Unicode 12, but has some changes to the character class tables that\nthe algorithm is given in terms of.\n\nThe test tables haven't been updated in Unicode 13 and are still passing,\nand so the new tables seem to be broadly compatible with the Unicode 12\nbehavior and unlikely to cause significant problems for applications\npreviously built for Unicode 12's rules.",
"is_bot": false,
"headline": "textseg: Update tables for Unicode 13.",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2021-02-22T23:45:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffeefd91d8229dd66e823a2170e77134e3c0ab88",
"body": null,
"is_bot": false,
"headline": "Create README.md",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2020-03-07T00:47:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39e4d0eb6bfccda9159f0d5101c53c7b1572826a",
"body": "The main functionality for this repository is Unicode version specific and\nwe have a separate module import path for each so that callers can select\nthe specific versions they need.\n\nThis new \"autoversion\" module is here to make life a little easier for\ncallers who just want to match the text segmen\n[…]\nr each new version of Go\nthat's released, but hopefully that small annoyance here leads to less\nannoyance for downstreams who can just upgrade this package to gain\nsupport for new Go/Unicode versions.",
"is_bot": false,
"headline": "autoversion: Wrapper that selects Unicode version automatically",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2020-03-06T23:53:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "440e7ccc54b08fbca3def7041df41946ebe5f875",
"body": null,
"is_bot": false,
"headline": "Update tables for Unicode 12.0.0",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2020-03-06T20:17:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7dab68ee665bad8369e3ea783ca5583bdac5a9f",
"body": "As of Unicode 11 the grapheme cluster definition is derived from a\nproperty defined in the emoji data, so we need to introduce a table from\nthere too now in addition to the table for the text segmentation\nspecification.\n\nThis also includes an updated table of grapheme cluster segmentation tests\nderived from the Unicode character database version 11.0.0.",
"is_bot": false,
"headline": "textseg: Update tables for Unicode 11.0.0",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2020-03-06T20:12:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d674eb84121ead7707369fd0e20adac3ea967d7c",
"body": "This uses the same segmentation algorithm as before with Unicode 9.0.0,\nbut incorporates the character tables from the Unicode character database\nfrom Unicode 10.",
"is_bot": false,
"headline": "Update for Unicode 10.0.0 data",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2020-03-06T20:04:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aeb9149d1ee83b4405e5064b507fbeaca8407a8b",
"body": "In order to support new versions of Unicode without imposing those changes\non existing callers expecting prior versions, this repository is switching\nto a new versioning model where each major version of Unicode we support\ngets a separate major version with the corresponding number.\n\nThis \"v9\" is th\n[…]\n this repository, so that they are all\nsimultaneously importable into the same program and so that it's clearer\nin a downstream project's go.mod which version of Unicode they are using\nthe rules from.",
"is_bot": false,
"headline": "Module is now github.com/apparentlymart/go-textseg/v9",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2020-03-06T19:54:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb01f485ebef760e5ee06d55e1b07534dda2d295",
"body": "This module uses only standard library dependencies, so its module\nmanifest is straightforward.",
"is_bot": false,
"headline": "Get ready to be a Go module",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2018-08-15T02:43:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b836f5c4d331d1945a2fead7188db25432d73b69",
"body": null,
"is_bot": false,
"headline": "Enable codecov.io reports for Travis-CI builds",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-31T20:39:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6eea9c24e340f91420252b4fd4ec59f94f54fe2a",
"body": "The tip test is mainly for information about forthcoming breakages, and\nisn't intended to be a blocker for merging.",
"is_bot": false,
"headline": "In Travis-CI, don't test Go 1.7 and don't wait for tip to complete",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T16:34:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20c473e87fbe1967cb3601f74dc96c439b26beb0",
"body": null,
"is_bot": false,
"headline": "Travis-CI test configuration",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T16:28:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40e9043114496928b5133d5ac534d8dc2e15be20",
"body": "This is like AllTokens except it returns just the number of tokens found,\nrather than the tokens themselves.",
"is_bot": false,
"headline": "TokenCount function, for counting tokens",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T16:15:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33a8a4c5ea12fbe80b5c2ddff4583c0af36325ed",
"body": null,
"is_bot": false,
"headline": "tests for AllTokens",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T16:15:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6588371e643cfa516fa9e3a56c447d1bb3c4d72",
"body": "This is pretty redundant given the built-in functionality in Go, but\nsometimes it's convenient to have everything expressed as a\nbufio.SplitFunc to get general behavior across any set of tokens, like\nwith the helper functions in this package.",
"is_bot": false,
"headline": "Function for scanning UTF-8 sequences",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T16:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "896d4763dde0bc5f5dc2f8c9c22e6cc0b62d5b5a",
"body": "This is not explicitly called out in the spec, but the tests clearly\nexpect this character to always be a split point, which means it follows\nthe same rules as for control characters.",
"is_bot": false,
"headline": "Handle 0xFFFD Replacement Character as a control character",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T15:55:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15092e11ba3efaa0f1864d8bb4e814e66b78e56a",
"body": null,
"is_bot": false,
"headline": "Prepend sequences can exist without anything following",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T15:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e2346f77e77fa0ad52cc4acc05c68955eeab7c8",
"body": null,
"is_bot": false,
"headline": "Deal with some holes in the Hangul rules",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T15:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8b86753a12356ab26ddc4549500e765a09b3e2d",
"body": null,
"is_bot": false,
"headline": "More helpful test result output, with category information",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T15:44:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "876cc4dc97d0aed81c90de137e0bbe11d8a2396e",
"body": null,
"is_bot": false,
"headline": "Support Hangul sequences in the scanner",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T15:31:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a08b5dee5d1bf089a4091792e4ad5facd8d290f5",
"body": "This is primarily useful for testing.",
"is_bot": false,
"headline": "String method for the rune range type",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T15:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e975dc80c5dd398bc2f72e34bd2771af1e2285b",
"body": "Otherwise we get different results each time we run \"go generate\".",
"is_bot": false,
"headline": "Sort the rangetables into alphabetical order by name",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T15:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "add010616cf19150c6a58fd5f8cb37488566eb4e",
"body": "This still isn't entirely complete, since the grammar lacks rules for\nHangul syllable sequences, but it's doing a lot better than the old\nscanner was.",
"is_bot": false,
"headline": "Use a ragel-generated scanner rather than a hand-written one",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-27T02:40:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fb798aca2d5cb8f4c4d3a1886fc28ae023fa223",
"body": "At this point it's not passing the unicode test suite entirely, due to\nvarious edge cases.",
"is_bot": false,
"headline": "First pass of ScanGraphemeClusters",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-14T17:45:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b1d80939a56bc6346a3294d7bda46515729ab82",
"body": "This consumes all of the tokens from a scanner into a slice of slices,\nfor easier processing and comparison at the expense of more memory usage.",
"is_bot": false,
"headline": "AllTokens helper function",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-14T17:44:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b969438cffb4696a9831e7797659124cb651e01",
"body": "(and the tools to generate them)",
"is_bot": false,
"headline": "Unicode text segmentation tables",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-14T17:43:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d7456bc5fea222e8eb9ae3fe91ec2aa65883fa8",
"body": null,
"is_bot": false,
"headline": "LICENSE",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-14T17:42:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79f35bac1117dfcf8441517f9bde5cd2edca6905",
"body": null,
"is_bot": false,
"headline": "hi",
"author_name": "Martin Atkins",
"author_login": "apparentlymart",
"committed_at": "2017-05-14T17:42:40Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 12,
"commits_last_year": 25,
"latest_release_at": "2026-07-04T01:11:04Z",
"latest_release_tag": "v17.0.1",
"releases_from_tags": true,
"days_since_last_push": 24,
"active_weeks_last_year": 3,
"days_since_latest_release": 24,
"mean_days_between_releases": 256.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/apparentlymart/go-textseg/v17",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/apparentlymart/go-textseg/v17",
"is_deprecated": false,
"latest_version": "v17.0.1",
"repository_url": "https://github.com/apparentlymart/go-textseg",
"versions_count": 2,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-04T01:11:04Z",
"latest_version_yanked": null,
"days_since_latest_publish": 24
},
{
"name": "github.com/apparentlymart/go-textseg/autoversion",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/apparentlymart/go-textseg/autoversion",
"is_deprecated": false,
"latest_version": "v1.7.0",
"repository_url": "https://github.com/apparentlymart/go-textseg",
"versions_count": 9,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-03T18:47:05Z",
"latest_version_yanked": null,
"days_since_latest_publish": 24
}
]
},
"popularity": {
"forks": 6,
"stars": 14,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2020-10-06",
"count": 1
},
{
"date": "2022-10-07",
"count": 1
},
{
"date": "2023-08-29",
"count": 1
},
{
"date": "2025-10-18",
"count": 1
},
{
"date": "2025-12-04",
"count": 1
},
{
"date": "2026-02-13",
"count": 1
}
],
"complete": true,
"collected": 6,
"total_forks": 6
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"autoversion/go.mod",
"go.mod"
],
"largest_source_bytes": 106886,
"source_files_sampled": 19,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"autoversion/go.mod",
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 7,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/apparentlymart/go-textseg/v15",
"manifest": "autoversion/go.mod",
"ecosystem": "go",
"version_constraint": "v15.0.0"
},
{
"name": "github.com/apparentlymart/go-textseg/v17",
"manifest": "autoversion/go.mod",
"ecosystem": "go",
"version_constraint": "v17.0.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/apparentlymart/go-textseg/v15",
"direct": true,
"version": "v15.0.0",
"ecosystem": "go"
},
{
"name": "github.com/apparentlymart/go-textseg/v17",
"direct": true,
"version": "v17.0.0",
"ecosystem": "go"
},
{
"name": "github.com/apparentlymart/go-textseg/v10",
"direct": false,
"version": "10.0.0",
"ecosystem": "go"
},
{
"name": "github.com/apparentlymart/go-textseg/v11",
"direct": false,
"version": "11.0.0",
"ecosystem": "go"
},
{
"name": "github.com/apparentlymart/go-textseg/v12",
"direct": false,
"version": "12.0.0",
"ecosystem": "go"
},
{
"name": "github.com/apparentlymart/go-textseg/v13",
"direct": false,
"version": "13.0.0",
"ecosystem": "go"
},
{
"name": "github.com/apparentlymart/go-textseg/v9",
"direct": false,
"version": "9.0.0",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 7,
"direct_count": 2,
"indirect_count": 5
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 3,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 2,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "apparentlymart",
"commits": 58,
"avatar_url": "https://avatars.githubusercontent.com/u/20180?v=4"
},
{
"type": "User",
"login": "CyrilBrulebois",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/8861145?v=4"
},
{
"type": "User",
"login": "kmoe",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/5575356?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.951
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 6 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "23 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "78a09841d57644bc59d8ee264e830b8cbfd83262",
"ran_at": "2026-07-28T13:39:03Z",
"aggregate_score": 4.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-04T01:11:13Z",
"oldest_open_prs": [
{
"number": 3,
"created_at": "2020-10-06T06:30:06Z",
"last_comment_at": "2020-11-26T13:26:57Z",
"last_comment_author": "asellappen"
}
],
"last_merged_pr_at": "2023-08-29T15:35:34Z",
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/apparentlymart/go-textseg",
"host": "github.com",
"name": "go-textseg",
"owner": "apparentlymart"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 52 is calibrated to 53 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 52,
"calibrated": 53,
"calibration": "2026-08-02"
}
}
],
"value": 53,
"inputs": {
"security": 53,
"vitality": 61,
"community": 36,
"governance": 64,
"calibration": "2026-08-02",
"engineering": 38,
"ai_readiness": 60,
"weighted_overall_raw": 52
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 61,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"commits_last_year": 25,
"human_commit_share": 1,
"days_since_last_push": 24,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 24 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 24
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "25 commits in the last year",
"points": 12.7,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 25
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "23 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"releases_count": 12,
"latest_release_tag": "v17.0.1",
"releases_from_tags": true,
"days_since_latest_release": 24,
"mean_days_between_releases": 256.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "12 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 12
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 24 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 24
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~256.7 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 256.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 30,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 30 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 30
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 36,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"forks": 6,
"stars": 14,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "14 stars",
"points": 18.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 14
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "6 forks",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 6
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.951
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 95% of commits",
"points": 1.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 95
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 74,
"inputs": {
"merged_prs": 3,
"open_issues": 0,
"closed_issues": 2,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 1,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "3/4 decided PRs merged",
"points": 22.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 3,
"decided": 4
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"followers": 1475,
"owner_type": "User",
"is_verified": null,
"owner_login": "apparentlymart",
"public_repos": 300,
"account_age_days": 6561
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,475 followers of apparentlymart",
"points": 22.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1475,
"login": "apparentlymart"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "300 public repos, account ~17 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 300
}
},
{
"code": "account_age_years",
"params": {
"years": 17
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/apparentlymart/go-textseg/v17",
"github.com/apparentlymart/go-textseg/autoversion"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 24
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 24 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 24
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "9 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 9
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "weak",
"name": "Engineering Quality",
"value": 38,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 30,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 53,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 4.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "23 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 7 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 7
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 7,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 7,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 60,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.738,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "45 of 61 human commits state their intent (structured subject or explanatory body)",
"points": 39.3,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 45,
"sampled": 61
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"autoversion/go.mod",
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "autoversion/go.mod, go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "autoversion/go.mod, go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 61",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 61
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 97,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 106886,
"source_files_sampled": 19,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/19 source files over 60KB",
"points": 52.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 19,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-28T13:39:09.466638Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/apparentlymart/go-textseg.svg",
"full_name": "apparentlymart/go-textseg",
"license_state": "standard",
"license_spdx": "MIT"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з apparentlymart/go-textseg. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v2.3.1, схема v0.27.0 — повна методологія · вікі метрик.
