Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-26 20:47 UTC

caspermeijn / prost

PROST! a Protocol Buffers implementation for the Rust Language

RustApache-2.0★ 0 зірок⑂ 0 форківз лист. 2023 р.форкПереглянути на GitHub ↗

caspermeijn/prost має індекс здоров’я 42 зі 100, що відповідає смузі «У зоні ризику». Найвищий показник — Security (58/100), найнижчий — Community & Adoption (34/100). Останнє оновлення було 21 день тому. Більшість нещодавньої роботи виконує один учасник.

42
загалом / 100
У зоні ризику

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

42
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

Casper MeijnОсобистий обліковий запис
13 підписників105 публічних репозиторіївз груд. 2011 р.

Цей репозиторій належить особистому обліковому запису. Проєкт з єдиним власником несе більший ризик безперервності, ніж підтримуваний організацією.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікаціяТеги
crates.ioprostвказує на інший репозиторій — не оцінюється0.14.440 093 2534649 днів томуprotobufserializationencoding
crates.ioprotobuf3.7.212 090 13817716 днів тому
crates.ioconformanceвказує на інший репозиторій — не оцінюється0.2.0622481 день томуserdeconformancetesting
crates.ioprost-buildвказує на інший репозиторій — не оцінюється0.14.422 054 6184749 днів тому
crates.ioprost-typesвказує на інший репозиторій — не оцінюється0.14.429 327 8144249 днів тому
crates.ioprost-deriveвказує на інший репозиторій — не оцінюється0.14.438 534 0554249 днів тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

37У зоні ризику · 22% загального індексу
Як обчислюється оцінка
28.8/36Свіжість push — останній push 21 дн. тому
0/36Ритм комітів — 0/52 тижнів із комітами
0/18Обсяг комітів — 0 комітів за останній рік
0/10OpenSSF Scorecard: Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Використані вхідні дані
commits_last_year0
human_commit_share0,94
days_since_last_push21
active_weeks_last_year0

Дисципліна релізів

48У зоні ризику
Як обчислюється оцінка
16.2/27Випускає релізи — 2 тегів версій (без релізів GitHub)
7.2/36Свіжість релізів — останній реліз 597 дн. тому
19.8/27Ритм релізів — реліз кожні ~97,8 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count2
latest_release_tagv0.13.4
releases_from_tagsтак
days_since_latest_release597
mean_days_between_releases97,8
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

34У зоні ризику · 18% загального індексу
Як обчислюється оцінка
0/60Зірки — 0 зірок
0/25Форки — 0 форків
0/15Спостерігачі — 0 спостерігачів
Використані вхідні дані
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
0/22.5README
22.5/22.5Ліцензія — визнана ліцензія (Apache-2.0)
0/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeні
has_licenseні
has_contributingні
has_issue_templateні
has_code_of_conductні
has_pull_request_templateні
Як обчислюється оцінка
80/80Щомісячні завантаження — 12 090 138 завантажень/місяць у crates
0/20Залежні пакети в реєстрі — ця екосистема цього не повідомляє
Використані вхідні дані
packagesprotobuf
dependents
ecosystemscrates
total_downloads162 263 641
monthly_downloads12 090 138
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

47У зоні ризику · 24% загального індексу
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
10.9/22.5Розподіл комітів — головний контриб’ютор — автор 51% комітів
13.5/13.5Широта контриб’юторів — 99 контриб’юторів
10/10OpenSSF Scorecard: Contributors — project has 20 contributing companies or organizations
Використані вхідні дані
bus_factor1
contributors_sampled99
top_contributor_share0,514
Як обчислюється оцінка
0/46.8Вирішення issue — немає issue або даних
0/38.3Прийняття PR — злито 0/10 вирішених PR
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Використані вхідні дані
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs10
Виключено з оцінювання (немає даних або не застосовно): Вирішення issue. Залишкові ваги перенормовано.
Як обчислюється оцінка
10/30Підтримка власника — особистий (користувацький) обліковий запис
0/20Верифікований домен — не застосовно до користувацьких облікових записів
8.2/25Охоплення власника — 13 підписників у caspermeijn
25/25Послужний список — 105 публічних репозиторіїв, вік облікового запису ~14 р.
Використані вхідні дані
followers13
owner_typeUser
is_verified
owner_logincaspermeijn
public_repos105
account_age_days5 326
Виключено з оцінювання (немає даних або не застосовно): Верифікований домен. Залишкові ваги перенормовано.

Супровід пакетів

100Відмінний
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у crates
35/35Свіжість публікацій — остання публікація 16 дн. тому
20/20Історія версій — 177 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesprotobuf
ecosystemscrates
any_deprecatedні
min_days_since_publish16

Інженерна якість

Чи наявні базові інженерні практики та документація?

36У зоні ризику · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 2 процес(ів) CI
24/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — немає даних
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configні
has_precommit_configні
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: CI-Tests. Залишкові ваги перенормовано.

Документація

1Критичний
Як обчислюється оцінка
0/30README
0/25Каталог документації
0/15Сайт документації / домашня сторінка
0/10Опис репозиторію
0/10Теми
0/10Wiki
Використані вхідні дані
topics
has_wikiні
homepage
has_readmeні
has_docs_dirні
has_descriptionні

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

58Помірний · 16% загального індексу

Стан безпеки

47У зоні ризику
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — немає даних
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 20 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
5/5Fuzzing — project is fuzzed
2.5/2.5Ліцензія — license file detected
0/7.5Maintained — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
0/5Packaging — немає даних
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate4,7
Виключено з оцінювання (немає даних або не застосовно): ci_tests, packaging, signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
35/35Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
25/25Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень
0/40Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
sourceosv
advisories0
affected_packages0
assessed_packages62
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей crates:prost@0.14.4 — тим, що тягне за собою встановлення опублікованого пакета, — 62 пакетів. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

58Помірний · 0% загального індексу
Як обчислюється оцінка
0/45Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 94 з 94 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share1
agent_instruction_files
agent_instruction_max_bytes
Як обчислюється оцінка
12.6/18Розгортання однією командою — Cargo.toml, benchmarks/Cargo.toml, conformance/Cargo.toml (домовленість інструментарію, без раннера задач)
22/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
11/11Статична перевірка типів — Rust (статично типізована)
10/10Відтворюване середовище — devcontainer, Nix
0/10Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом
8/8Автоматизоване супроводження — 6 з останніх 100 комітів — автоматичні оновлення залежностей
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixтак
has_testsтак
lockfiles
has_dockerfileні
typed_languageтак
bootstrap_files
has_devcontainerтак
has_linter_configні
typecheck_configs
agent_commit_share0
toolchain_manifestsCargo.toml, benchmarks/Cargo.toml, conformance/Cargo.toml, fuzz/Cargo.toml, fuzz/afl/proto3/Cargo.toml, prost-build/Cargo.toml, prost-derive/Cargo.toml, prost-types/Cargo.toml, prost/Cargo.toml, protobuf/Cargo.toml, tests-2015/Cargo.toml, tests-2018/Cargo.toml, tests-no-std/Cargo.toml, tests/Cargo.toml, tests/single-include/Cargo.toml
dependency_bot_commit_share0,06
Як обчислюється оцінка
45/45Типізований код — Rust (статично типізована)
54.3/55Керовані розміри файлів — 1/84 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageRust
largest_source_bytes94 767
source_files_sampled84
oversized_source_files1
Як обчислюється оцінка
40/40Схема API (OpenAPI/GraphQL/proto) — prost-build/src/fixtures/alphabet/a.proto, prost-build/src/fixtures/alphabet/b.proto, prost-build/src/fixtures/alphabet/c.proto, prost-build/src/fixtures/alphabet/d.proto, prost-build/src/fixtures/alphabet/e.proto, prost-build/src/fixtures/alphabet/f.proto, prost-build/src/fixtures/field_attributes/field_attributes.proto, prost-build/src/fixtures/helloworld/goodbye.proto, prost-build/src/fixtures/helloworld/hello.proto, prost-build/src/fixtures/helloworld/types.proto, prost-build/src/fixtures/imports_empty/imports_empty.proto, prost-build/src/fixtures/smoke_test/smoke_test.proto, tests/single-include/protos/outdir.proto, tests/single-include/protos/search.proto, tests/src/boxed_field.proto, tests/src/custom_attributes.proto, tests/src/custom_debug.proto, tests/src/default_enum_value.proto, tests/src/default_string_escape.proto, tests/src/deprecated_field.proto, tests/src/derive_copy.proto, tests/src/enum_keyword_variant.proto, tests/src/groups.proto, tests/src/ident_conversion.proto, tests/src/include/google/protobuf/any.proto, tests/src/include/google/protobuf/api.proto, tests/src/include/google/protobuf/compiler/plugin.proto, tests/src/include/google/protobuf/descriptor.proto, tests/src/include/google/protobuf/duration.proto, tests/src/include/google/protobuf/empty.proto, tests/src/include/google/protobuf/field_mask.proto, tests/src/include/google/protobuf/source_context.proto, tests/src/include/google/protobuf/struct.proto, tests/src/include/google/protobuf/timestamp.proto, tests/src/include/google/protobuf/type.proto, tests/src/include/google/protobuf/wrappers.proto, tests/src/invalid_doctest.proto, tests/src/nesting.proto, tests/src/no_package.proto, tests/src/no_root_packages/gizmo.proto, tests/src/no_root_packages/root.proto, tests/src/no_root_packages/widget.proto, tests/src/no_root_packages/widget_factory.proto, tests/src/no_shadowed_types.proto, tests/src/no_unused_results.proto, tests/src/oneof_attributes.proto, tests/src/option_enum.proto, tests/src/option_struct.proto, tests/src/packages/gizmo.proto, tests/src/packages/root.proto, tests/src/packages/widget.proto, tests/src/packages/widget_factory.proto, tests/src/proto3_presence.proto, tests/src/recursive_oneof.proto, tests/src/result_enum.proto, tests/src/result_struct.proto, tests/src/submessage_without_package.proto, tests/src/type_names.proto, tests/src/well_known_types.proto, third_party/old_protobuf_benchmarks/benchmarks.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto, third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto
0/20Сервер MCP
0/40Придатні до запуску приклади
Використані вхідні дані
example_dirs
has_mcp_signalні
api_schema_filesprost-build/src/fixtures/alphabet/a.proto, prost-build/src/fixtures/alphabet/b.proto, prost-build/src/fixtures/alphabet/c.proto, prost-build/src/fixtures/alphabet/d.proto, prost-build/src/fixtures/alphabet/e.proto, prost-build/src/fixtures/alphabet/f.proto, prost-build/src/fixtures/field_attributes/field_attributes.proto, prost-build/src/fixtures/helloworld/goodbye.proto, prost-build/src/fixtures/helloworld/hello.proto, prost-build/src/fixtures/helloworld/types.proto, prost-build/src/fixtures/imports_empty/imports_empty.proto, prost-build/src/fixtures/smoke_test/smoke_test.proto, tests/single-include/protos/outdir.proto, tests/single-include/protos/search.proto, tests/src/boxed_field.proto, tests/src/custom_attributes.proto, tests/src/custom_debug.proto, tests/src/default_enum_value.proto, tests/src/default_string_escape.proto, tests/src/deprecated_field.proto, tests/src/derive_copy.proto, tests/src/enum_keyword_variant.proto, tests/src/groups.proto, tests/src/ident_conversion.proto, tests/src/include/google/protobuf/any.proto, tests/src/include/google/protobuf/api.proto, tests/src/include/google/protobuf/compiler/plugin.proto, tests/src/include/google/protobuf/descriptor.proto, tests/src/include/google/protobuf/duration.proto, tests/src/include/google/protobuf/empty.proto, tests/src/include/google/protobuf/field_mask.proto, tests/src/include/google/protobuf/source_context.proto, tests/src/include/google/protobuf/struct.proto, tests/src/include/google/protobuf/timestamp.proto, tests/src/include/google/protobuf/type.proto, tests/src/include/google/protobuf/wrappers.proto, tests/src/invalid_doctest.proto, tests/src/nesting.proto, tests/src/no_package.proto, tests/src/no_root_packages/gizmo.proto, tests/src/no_root_packages/root.proto, tests/src/no_root_packages/widget.proto, tests/src/no_root_packages/widget_factory.proto, tests/src/no_shadowed_types.proto, tests/src/no_unused_results.proto, tests/src/oneof_attributes.proto, tests/src/option_enum.proto, tests/src/option_struct.proto, tests/src/packages/gizmo.proto, tests/src/packages/root.proto, tests/src/packages/widget.proto, tests/src/packages/widget_factory.proto, tests/src/proto3_presence.proto, tests/src/recursive_oneof.proto, tests/src/result_enum.proto, tests/src/result_struct.proto, tests/src/submessage_without_package.proto, tests/src/type_names.proto, tests/src/well_known_types.proto, third_party/old_protobuf_benchmarks/benchmarks.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto, third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto

Ключові факти

0зірок GitHub
99контриб'юторів
0комітів за останні 12 місяців
21днів від останнього пушу
2релізів
1бас-фактор
0відкритих issue
crates.ioпакетних екосистем

Попередження щодо збору даних

  • Community profile unavailable
  • crates package 'prost' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring
  • Could not fetch crates package 'tests-2015' from its registry
  • Could not fetch crates package 'tests-2018' from its registry
  • crates package 'conformance' points at a different repository (https://github.com/CAD97/tinyc/tree/master/crates/conformance); excluded from ecosystem scoring
  • crates package 'prost-build' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring
  • crates package 'prost-types' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring
  • crates package 'prost-derive' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Докладніше

OpenSSF Scorecard 4.7 / 10
4.7сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-26 20:46 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
н/дCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
10Contributorsproject has 20 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
10Fuzzingproject is fuzzed
10Licenselicense file detected
0Maintained0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
н/дPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Прямі залежності 45
РеєстрПакетОбмеження версіїМаніфест
crates.iobytes1conformance/Cargo.toml
crates.ioenv_logger0.11conformance/Cargo.toml
crates.ioprostconformance/Cargo.toml
crates.ioprotobufconformance/Cargo.toml
crates.iotestsconformance/Cargo.toml
crates.iobytes1prost-build/Cargo.toml
crates.ioheck>=0.4, <=0.5prost-build/Cargo.toml
crates.ioitertools>=0.10, <=0.13prost-build/Cargo.toml
crates.iolog0.4.4prost-build/Cargo.toml
crates.iomultimap>=0.8, <=0.10prost-build/Cargo.toml
crates.iopetgraph0.6prost-build/Cargo.toml
crates.ioprost0.13.3prost-build/Cargo.toml
crates.ioprost-types0.13.3prost-build/Cargo.toml
crates.iotempfile3prost-build/Cargo.toml
crates.ioonce_cell1.17.1prost-build/Cargo.toml
crates.ioregex1.8.1prost-build/Cargo.toml
crates.ioprettyplease0.2prost-build/Cargo.toml
crates.iosyn2prost-build/Cargo.toml
crates.iopulldown-cmark0.12prost-build/Cargo.toml
crates.iopulldown-cmark-to-cmark>=16, <=17prost-build/Cargo.toml
crates.ioanyhow1.0.1prost-derive/Cargo.toml
crates.ioitertools>=0.10.1, <=0.13prost-derive/Cargo.toml
crates.ioproc-macro21.0.60prost-derive/Cargo.toml
crates.ioquote1prost-derive/Cargo.toml
crates.iosyn2prost-derive/Cargo.toml
crates.ioprost0.13.3prost-types/Cargo.toml
crates.iobytes1prost/Cargo.toml
crates.ioprost-derive0.13.3prost/Cargo.toml
crates.ioprostprotobuf/Cargo.toml
crates.ioprost-typesprotobuf/Cargo.toml
crates.ioanyhow1.0.1tests-2015/Cargo.toml
crates.iocfg-if1tests-2015/Cargo.toml
crates.ioprosttests-2015/Cargo.toml
crates.ioprost-typestests-2015/Cargo.toml
crates.ioprotobuftests-2015/Cargo.toml
crates.ioanyhow1.0.1tests-2018/Cargo.toml
crates.iobytes1tests-2018/Cargo.toml
crates.iocfg-if1tests-2018/Cargo.toml
crates.ioprosttests-2018/Cargo.toml
crates.ioprost-typestests-2018/Cargo.toml
crates.ioprotobuftests-2018/Cargo.toml
crates.ioanyhow1.0.45tests-no-std/Cargo.toml
crates.iocfg-if1tests-no-std/Cargo.toml
crates.ioprosttests-no-std/Cargo.toml
crates.ioprost-typestests-no-std/Cargo.toml
Усі залежності не зібрано

Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Сповіщення про залежності 0

Встановлення crates:prost@0.14.4 тягне 62 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.

Жодне відоме сповіщення не стосується оцінених залежностей.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 52102,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Nix": 532,
        "Rust": 610667,
        "Shell": 2220
      },
      "pushed_at": "2026-07-05T08:44:34Z",
      "created_at": "2023-11-23T12:55:47Z",
      "owner_type": "User",
      "updated_at": "2024-09-25T05:41:36Z",
      "description": "PROST! a Protocol Buffers implementation for the Rust Language",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "master",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Rust",
      "significant_languages": [
        "Rust"
      ]
    },
    "owner": {
      "blog": "https://www.caspermeijn.nl/",
      "name": "Casper Meijn",
      "type": "User",
      "login": "caspermeijn",
      "company": null,
      "location": "Nederland",
      "followers": 13,
      "avatar_url": "https://avatars.githubusercontent.com/u/1286074?v=4",
      "created_at": "2011-12-26T11:10:36Z",
      "is_verified": null,
      "public_repos": 105,
      "account_age_days": 5326
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.13.4",
          "kind": "patch",
          "published_at": "2024-12-06T15:17:23Z"
        },
        {
          "tag": "v0.13.2",
          "kind": "patch",
          "published_at": "2024-08-30T18:58:32Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "9ed944eb633480079037dfceeee61aac6cd0c94f",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release version 0.13.3 (#1164)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-21T11:57:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb977f4cc28a3f5c913b963a27b553cf845bb9d2",
          "body": "* fix(prost-build): Remove `derived(Copy)` on boxed fields\n\n* Add regression test",
          "is_bot": false,
          "headline": "fix(prost-build): Remove `derived(Copy)` on boxed fields (#1157)",
          "author_name": "Donough Liu",
          "author_login": "ldm0",
          "committed_at": "2024-09-20T06:09:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8d4cac58ef7c5e33ba3279c836966c9109d4554c",
          "body": "Make `normalize` easier to use, by introducing `Duration::normalized` and `Timestamp::normalized`. They do the same as there `normalize` equivalents, but return a copy for ease of use.",
          "is_bot": false,
          "headline": "feat(prost-types): Add `normalized` functions (#1158)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-20T05:36:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "644c328de4a2560d4cd12e01245faf9b8d1ddd0f",
          "body": null,
          "is_bot": false,
          "headline": "build(deps): update pulldown-cmark-to-cmark from 16 to 17 (#1155)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-13T07:30:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b1b982d5f21de68f32d9f3f5b885731f2ccee83",
          "body": "Fixes `clippy::use_self` violations",
          "is_bot": false,
          "headline": "style(generated-code): use `Self` in `as_str_name` (#1154)",
          "author_name": "Alice Carroll",
          "author_login": "magistau",
          "committed_at": "2024-09-13T07:29:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9fa3f2e5cb6d1d1967644b22cdeecf160410ad41",
          "body": "Due to conflicting PR #1152 and #1150 tests were failing.",
          "is_bot": false,
          "headline": "tests(prost-build): Fix error texts (#1156)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-13T06:18:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7dcd269a0e16e4aea83c070e4b61d8f8cd0c47cd",
          "body": "Trigger all errors of `prost-build` and check the produced error text",
          "is_bot": false,
          "headline": "tests(prost-build): Validate error texts (#1152)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-11T06:01:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3fd54c73f413c060592aaf5929c753c0b376252",
          "body": "`MessageGraph` is an internal type. The currenly implementation can't fail, so it doesn't have to return a `Result`",
          "is_bot": false,
          "headline": "style: `MessageGraph::new()` can't actually fail (#1151)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-11T05:58:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d059d0515226fe9fa5c7188ea50594112bba231a",
          "body": null,
          "is_bot": false,
          "headline": "style: use `Path::display()` when printing a path (#1150)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-11T05:58:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18c4681d96b59820bf319b6f84749f17258d248d",
          "body": "Update the example in the generated documenation.\n- Use `cargo add` to dependencies, instead of refering to the latest version\n- Add more protobuf comments, as the documenation is mentioned in the last step",
          "is_bot": false,
          "headline": "docs(prost-build): Use `cargo add` in example (#1149)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-11T05:57:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61745dedc0de751890dd0dd75c92a8f982367ce5",
          "body": null,
          "is_bot": false,
          "headline": "tests: Actually test `skip_debug` for `prost::Oneof` (#1148)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-05T17:49:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef8c040a5f7a9bf974b8ffe1a13a7fca34b72286",
          "body": "…136)\n\nCrate `protobuf` compiles some .proto-files from the checked out repo in `third_party/protobuf`. Those files can use newest features from `protoc`. Therefore during development the `protoc` in `PATH` must be the same version or newer than in `third_party/protobuf`.\n\nThe crate already builds a\n[…]\n out repo to be used in conformance executable. Use that specific `protoc` for compiling the .proto-files in the crate.\n\nThis doesn't influence the `protoc` used in crate `tests` nor published crates.",
          "is_bot": false,
          "headline": "build(protobuf): Use same `protoc` from same repo as .proto-files (#1…",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-04T14:44:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e3129e47aeeca27ff8dad5c5e66874613f57edb4",
          "body": "There are multiple implementations of assert on fixture files. Some also write to the file to ease development and some normalize line endings. Unify their implementation so that they work similar.",
          "is_bot": false,
          "headline": "chore: unify assert on fixtures (#1142)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-04T14:42:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2fc71325db4a7abfe85ac42f7b55be87160fc325",
          "body": null,
          "is_bot": false,
          "headline": "build(protobuf): Compile and install protoc on Windows (#1145)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-04T11:02:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ab14c27a05417d030002a1d58bfa7db15949e09",
          "body": "…k to 16 (#1144)",
          "is_bot": false,
          "headline": "build(deps): update pulldown-cmark to 0.12 and pulldown-cmark-to-cmar…",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-09-04T11:02:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96c40d77006974cfc59947a03372e0ccd2ea3589",
          "body": null,
          "is_bot": false,
          "headline": "docs(prost-types): Add description of using Any (#1141)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-30T19:16:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "02f3edf82b8d05ae39e4ed11f1467fdf3e1e91a0",
          "body": "Rust 1.71.1 was released on Aug. 3, 2023 (1 year ago at this time). This allows to bump `pulldown-cmark` dependency to the latest version.",
          "is_bot": false,
          "headline": "build: Increase MSRV to 1.71.1 (#1135)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-30T19:15:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57e794203106db483e5115e7e67502ef6f2c7ad8",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release version 0.13.2 (#1139)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-30T18:58:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8424775d78b13239df3cf3fe888236770a0cd839",
          "body": "Let the crate `cmake` handle the interaction with CMake executable. This simplifies our codebase and improves compatibility with other platforms.\n\n`CMAKE_BUILD_TYPE` is handle automatically based on `opt-level`.\n\nSet `CMAKE_GENERATOR` environment variable in CI instead of hardcoded dependency on `ninja-build`.",
          "is_bot": false,
          "headline": "build(protobuf): Use crate `cmake` (#1137)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-28T11:18:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21208abf667313866f79d3d1438310c4dc20bdff",
          "body": "…(#1125)\n\nBumps [model-checking/kani-github-action](https://github.com/model-checking/kani-github-action) from 0.32 to 1.1.\n- [Release notes](https://github.com/model-checking/kani-github-action/releases)\n- [Commits](https://github.com/model-checking/kani-github-action/compare/v0.32...v1.1)\n\n---\nupd\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump model-checking/kani-github-action from 0.32 to 1.1 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-08-23T09:54:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0c79864443621f20d92f9acc78a6ab0e7821dab0",
          "body": "Add a fuzzing target for parsing into a Duration.",
          "is_bot": false,
          "headline": "tests(fuzz): Add `parse_duration` fuzzing target (#1129)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-23T09:10:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52046b943fdf6f79461725027245f890c7b4f514",
          "body": "Three proptests are executed as kani proofs in CI.\nMake that explicit by marking them as kani proof.\nThis removes the dependency on propproof dependency when using kani.",
          "is_bot": false,
          "headline": "tests: Change some proptest to kani proofs (#1133)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-23T09:09:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee59dd5a9fe0935ad50e6ddbea5d23e3c6419468",
          "body": "The crate `tests-no-std` was never build without std in CI. Therefore the build was broken.\n\nUse the `no_std` compatible `anyhow` calls and run `no-std-check` on the crate.",
          "is_bot": false,
          "headline": "tests: Fix build without std (#1134)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-23T07:06:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e773f5f6d38f74d0efff876011a2fd0d002aed4c",
          "body": "Set the path to `protoc` executable to be used by `prost-build`\n\nUse the provided path to find `protoc`. This can either be a file name which is\nsearched for in the `PATH` or an aboslute path to use a specific executable.",
          "is_bot": false,
          "headline": "feat(prost-build): Add protoc executable path to Config (#1126)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-20T09:48:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "753bd92a85a3aa305d9d96b5c6363dc58d6356e6",
          "body": "Remove feature check for a feature that doesn't exist in the `tests` crate. This allows clippy to be updated.",
          "is_bot": false,
          "headline": "ci(clippy): Update to cargo clippy version 1.80 (#1128)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-19T07:06:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df3e58e5d113a0dcf8b6735a5d04cde2d74e5df3",
          "body": "Add a fuzzing target for parsing into a Timestamp and comparing the result with crate chrono.",
          "is_bot": false,
          "headline": "tests(fuzz): Add `parse_date` fuzzing target (#1127)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-17T12:56:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "409b93214ed8d98fbb364031ccf330ce4e7caa32",
          "body": "`cargo clippy` reports:\n```\nwarning: the borrowed expression implements the required traits\n   --> protobuf/build.rs:143:14\n    |\n143 | ...rg(&format!(\"-DCMAKE_INSTALL_PREFIX={}\", prefix_dir.display(...\n    |       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ help: change this to: `fo\n[…]\nfurther information visit https://rust-lang.github.io/rust-clippy/master/index.html#needless_borrows_for_generic_args\n    = note: `#[warn(clippy::needless_borrows_for_generic_args)]` on by default\n```",
          "is_bot": false,
          "headline": "style: Remove needless borrow (#1122)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-16T10:27:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7670f420bdbee080b762a0e6397e436fb095503b",
          "body": "Bumps [baptiste0928/cargo-install](https://github.com/baptiste0928/cargo-install) from 2 to 3.\n- [Release notes](https://github.com/baptiste0928/cargo-install/releases)\n- [Changelog](https://github.com/baptiste0928/cargo-install/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/baptiste0928/car\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump baptiste0928/cargo-install from 2 to 3 (#1124)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-08-16T09:59:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb45beb6281e26db0b21a9f991fd155f9e77ee90",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3 to 4.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifac\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): bump actions/upload-artifact from 3 to 4 (#1123)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-08-16T09:58:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f1d7bda55edde889eca9a28d7eb19c3232c127f5",
          "body": null,
          "is_bot": false,
          "headline": "tests: Add tests for public interface of DecodeError (#1120)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-16T09:21:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "258231d4e20e93c596304e9d4bdc8cb9ff55bea0",
          "body": "The build script of crate `protobuf` installs some proto-files for testing in the prefix dir. However the only user is the same build script. Therefore we can skip the install and use the files directly.\n\nUse `absolute` path instead of `canonical` path, as `protoc` on Windows is not able to process `canonical` paths. This is sort of documented in https://doc.rust-lang.org/std/fs/fn.canonicalize.html",
          "is_bot": false,
          "headline": "build(protobuf): Don't install unused test proto (#1116)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-16T09:20:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "345ae5941550987a1480811959b9b4e80b196483",
          "body": "Automatically create PRs to update the version number of Github Actions",
          "is_bot": false,
          "headline": "ci(dependabot): Add github actions (#1121)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-16T09:18:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5c3525e5de18e4f1c9e17f569ca61288a34b0a5",
          "body": "`cargo-fuzz` recommends adding the `fuzz` crate to the workspace. It seems the problem of not compiling is fixed with recent dependencies.\n\nsource: https://github.com/rust-fuzz/cargo-fuzz?tab=readme-ov-file#usage",
          "is_bot": false,
          "headline": "build(fuzz): Add fuzz targets to workspace (#1117)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-16T07:45:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d38072f5962e29b0cb1ebef6038510c54fa13ca7",
          "body": "Running `cargo test --all-targets` will not run doctests, as noted in the removed comments.\n\nAnother effect is that Cargo.toml instructions for not running a test are ignored. For example, benchmarks are tested, but no unit tests are inside and bins marked with `test = false` are run.\n\nI diffed the text output of running `cargo test` and `cargo test --all-targets` and concluded that no useful test will be skipped when running just `cargo test`.",
          "is_bot": false,
          "headline": "ci: Run `cargo test` without `all-targets` (#1118)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-12T11:53:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53ca327dd0ee4507d55a073fa0f5de768d330eda",
          "body": null,
          "is_bot": false,
          "headline": "build(deps): Update devcontainer to Debian Bookworm release (#1114)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-09T05:57:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a404d1f826bbd1b3b9917776b5e0d72c5cf0f6b",
          "body": null,
          "is_bot": false,
          "headline": "chore: Remove allow clippy::derive_partial_eq_without_eq (#1115)",
          "author_name": "tottoto",
          "author_login": "tottoto",
          "committed_at": "2024-08-09T05:56:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e55cdaa8123d21987d6ef972b8e4052076ef348",
          "body": "`chrono` allows a negative zero local offset. I think we should follow their example.\n\nThe RFC 3339 spec says this is a special value, but doesn't specify how to handle the situation.\nhttps://www.rfc-editor.org/rfc/rfc3339#section-4.3",
          "is_bot": false,
          "headline": "fix(prost-types): Allow unknown local time offset (#1109)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-08-02T12:58:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d16bed88bb45abc6bbea92c9a42c454d8a194ec3",
          "body": "Duration `-0.123s` was formatted as a positive number.",
          "is_bot": false,
          "headline": "fix(prost-types): Format negative fractional duration (#1110)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-31T11:44:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef27f65a55cad02f4b4a11d16912b44164ae818b",
          "body": "* style: Move varint encoding to separate module\n\nWhile the `encoding` module is undocumented and not stable, there are known users. Leave a alias in place to prevent breaking them.\n\n* style: Move length delimiter encoding to separate module\n\nLeave a alias in `lib.rs` to prevent a breaking change.\n\n* style: Move wire type to separate module\n\nWhile the `encoding` module is undocumented and not stable, there are known users. Leave a alias in place to prevent breaking them.",
          "is_bot": false,
          "headline": "style: Move encoding functions into separate modules (#1111)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-31T11:42:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad5650b0c96b7e5c1f8310462af7f6e35c2a0bfe",
          "body": "* build(fuzz): afl is not in root directory\n\nThere exists an `afl` directory inside `/fuzz/`, but that doesn't explain the workspace exclude\n\n* build(fuzz): create `fuzz` is not part of workspace\n\nTherefore it can't rely on workspace parameters\n\n* build(fuzz): Use released version of `libfizzer-sys`\n\n* build(fuzz): Add missing dependency",
          "is_bot": false,
          "headline": "build(fuzz): Fix building of fuzzing targets (#1107)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-22T08:30:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10761018682438db5202d50231cda1721eb01710",
          "body": "`chrono` is able to parse timestamps which are more precise then nanoseconds. We can also do that but truncating the digits.",
          "is_bot": false,
          "headline": "fix(prost-types): Parse timestamp with long second fraction (#1106)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-20T14:51:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60092334927e100000cebf29f8f20f9c255830ee",
          "body": "…1067)\n\n* prost-build: Extract file descriptor loading from compile_protos()\n\n* Update prost-build/src/config.rs\n\nCo-authored-by: Casper Meijn <casper@meijn.net>\n\n* Add concrete example for Config::load_fds()\n\n---------\n\nCo-authored-by: Casper Meijn <casper@meijn.net>",
          "is_bot": false,
          "headline": "prost-build: Extract file descriptor loading from compile_protos() (#…",
          "author_name": "Sylvain Wallez",
          "author_login": "swallez",
          "committed_at": "2024-07-19T19:54:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5cc951127ea6f05faa72b48de7c2e8630f94555",
          "body": "The converstion from the private type DateTime to public type Timestamp is fallible when the DateTime is invalid. All code paths that used `DateTime::into::<Timestamp>()` first check whether the DateTime is valid and then do the conversion, therefore this problem was not visible. https://github.com/\n[…]\npl From<DateTime> for Timestamp` with `TryFrom` and remove the manual `is_valid` checks before the conversion.\n\nI added the test cases from the issue and roundtrip test between DateTime and Timestamp.",
          "is_bot": false,
          "headline": "fix(prost-types): Converting DateTime to Timestamp is fallible (#1095)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-19T13:21:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23d9fd7ebed10cdbbb6e28da7ff66b3a585e45fc",
          "body": "* Add Into instances for Value\n\n* Update conversions.rs\n\n* rustfmt",
          "is_bot": false,
          "headline": "Add From instances for Value (#1091)",
          "author_name": "​Andrzej Ressel",
          "author_login": "andrzejressel",
          "committed_at": "2024-07-19T11:44:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a291d0690541d2bfa2636c7833b6cbef3be49b19",
          "body": "Prevent placing build artifacts in the protobuf source tree by choosing a build directory in the out dir. A `cargo clean` will clean up the build artifacts.",
          "is_bot": false,
          "headline": "build: Use separated build directory for protobuf (#1103)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-19T06:31:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d65230115ca8a9ea5e449a14ba01fabab056c566",
          "body": "Add the benchmark protos and datasets from protobuf v3.14 to this repo. The upstream benchmarks have been\nchanged (and later removed) in newer versions of the upstream library. This copy ensures that\nthose benchmarks stay available for prost.\n\nThis is a requirement for updating to newer upstream protobuf version.",
          "is_bot": false,
          "headline": "chore: Move old protobuf benchmark into prost (#1100)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-19T06:31:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "366c6fb9f15e152597be8f88c709ae7e964196ec",
          "body": null,
          "is_bot": false,
          "headline": "fix(prost-types): '+' is not a numeric digit (#1104)",
          "author_name": "Kent Ross",
          "author_login": "mumbleskates",
          "committed_at": "2024-07-13T15:13:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee619460ef1f84c5c033d08b7a5b606116e0b414",
          "body": "Cargo clippy reports:\n\n```\nwarning: usage of a legacy numeric method\n  --> prost/src/lib.rs:71:24\n   |\n71 |     if length > usize::max_value() as u64 {\n   |                        ^^^^^^^^^^^\n   |\n   = help: for further information visit https://rust-lang.github.io/rust-clippy/master/index.html#legacy_numeric_constants\nhelp: use the associated constant instead\n   |\n71 |     if length > usize::MAX as u64 {\n   |                        ~~~\n```",
          "is_bot": false,
          "headline": "style: Remove use of legacy numeric constants (#1089)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-12T12:01:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "688da45b639d627c4e9bfdeb91c997294809ca9d",
          "body": "Only the crate `tests-2015` uses the feature `edition-2015`, but the code is shared with the `tests` crate.\n\nSame for `tests-no-std` which disables feature `std`, but reuses the code with the `tests` crate.\n\nTherefore the `tests`, `tests-2018` and `tests-no-std` crates should be configured to ignore\n[…]\n note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration\n  = note: `#[warn(unexpected_cfgs)]` on by default\n```",
          "is_bot": false,
          "headline": "build: Ignore missing features in `tests` crates (#1101)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-12T12:00:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a27310895a5bfc4537f956a6c6c061e5e84863d0",
          "body": "The nightly compiler warns about a incompatibility of the Cargo.toml for the next edition. Use the backwards compatible `proc-macro` in the Cargo.toml.\n\nCompiler reports:\n```\nwarning: prost/prost-derive/Cargo.toml: `proc_macro` is deprecated in favor of `proc-macro` and will not work in the 2024 edition\n```",
          "is_bot": false,
          "headline": "build: Use `proc-macro` in Cargo.toml (#1102)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-12T12:00:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6481c61f6d17036871866f8a37c74ce8428dd99b",
          "body": "* upstream date-time parsing fixes\n\n* add regression tests",
          "is_bot": false,
          "headline": "fix(prost-types): Fix date-time parsing (#1096)",
          "author_name": "Kent Ross",
          "author_login": "mumbleskates",
          "committed_at": "2024-07-12T11:59:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f19104a3d4345f4635bbc5fd54cb5089572e2660",
          "body": "* release 0.13.1\n\n* update changelog",
          "is_bot": false,
          "headline": "chore: prepare 0.13.1 release (#1099)",
          "author_name": "Lucio Franco",
          "author_login": "LucioFranco",
          "committed_at": "2024-07-09T13:04:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26463f437e1a3445c9d3119cf9cf0f64f5b23dfa",
          "body": "The generated code uses `Self::Error` to refer to `::prost::UnknownEnumValue`, but the term `Error` is not unique when an enum variant is called `Error`. Use the full type name to resolve the ambiguity.\n\nThe compiler reported:\n```\nerror: ambiguous associated item\n   --> /home/ircdev/src/prost/target\n[…]\note: `#[deny(ambiguous_associated_items)]` on by default\n    = note: this error originates in the derive macro `::prost::Enumeration` (in Nightly builds, run with -Z macro-backtrace for more info)\n```",
          "is_bot": false,
          "headline": "fix: Enum variant named `Error` causes ambiguous item (#1098)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-09T12:54:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23f71749696d5836afa143cbbb860fa8943e0640",
          "body": null,
          "is_bot": false,
          "headline": "chore: Release version 0.13.0 (#1093)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-08T17:07:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a1424cf8c71c0c276970d1b8f1ef17c424d818d",
          "body": "The prepare release script got out of sync with the actual code.\n- Automatically update the minor version in the readme\n- Cargo.toml version was moved in #1036",
          "is_bot": false,
          "headline": "build: Fix prepare-release.sh (#1094)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-07-08T14:13:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7790799b0dfc65f70cfde0a26e8f29f77510744a",
          "body": "…10, <=0.14 (#1070)\n\nUpdates the requirements on [itertools](https://github.com/rust-itertools/itertools) to permit the latest version.\n- [Changelog](https://github.com/rust-itertools/itertools/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/rust-itertools/itertools/compare/v0.10.0...v0.13.\n[…]\nndency-name: itertools\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): update itertools requirement from >=0.10, <=0.12 to >=0.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-05T09:02:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a0cc17102700d1215c791f1ee4b8df22481a19f",
          "body": null,
          "is_bot": false,
          "headline": "Add missing LICENSE symlink (#1086)",
          "author_name": "Cristian Le",
          "author_login": "LecrisUT",
          "committed_at": "2024-06-25T17:49:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae33a5ea97ff2df8a508b6f80fa5b88c4bc0c0a6",
          "body": "Prevent CI breakage when new lints are added to stable rust version by explicitly choosing the rust version used for the clippy job.",
          "is_bot": false,
          "headline": "ci: Set rust version of clippy job to a fixed version (#1090)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-06-25T17:11:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ba776540834b0cecbbaa6ca98bd79d9682cd7e92",
          "body": "Most generated files are untouched when the contents doesn't change. Use the same mechanism for include file as well.",
          "is_bot": false,
          "headline": "fix: Only touch include file if contents is changed (#1058)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-06-10T11:19:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7049d3eb20cf33bb1ac60bff19cc3a7bd48f6f2",
          "body": "* chore: remove `Cargo.toml` `documentation` field\n\n* chore: use cargo manifest  `workspace.package.authors`\n\n* chore: use cargo manifest  `workspace.package.repository`\n\n* chore: use cargo manifest  `workspace.package.license`\n\n* chore: use cargo manifest  `workspace.package.rust-version`\n\n* chore:\n[…]\ne.package.edition`:\n\n* chore: use cargo manifest  `workspace.package.version`\n\n* chore: group cargo workspace package metadata usage\n\n* chore: use `workspace.edition` for remaining 2021 edition crates",
          "is_bot": false,
          "headline": "workspace package metadata (#1036)",
          "author_name": "Gabriel Hansson",
          "author_login": "gibbz00",
          "committed_at": "2024-05-31T09:16:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ef4930c140c639eaaa0362662d90e55a31977eb3",
          "body": "* docs: Fix broken link warnings\n\n* ci: Check for documentation warnings",
          "is_bot": false,
          "headline": "docs: Fix broken link warnings (#1056)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-31T07:24:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52ff081f4296e4563a7a0e0d984b58663d3f0fe8",
          "body": "…078)\n\n* ci: Ensure both README are the same and prost version is correct\n\nFixes #1053\n\n* docs: Update prost version in README\n\n* build: Fix prepare-release.sh for README",
          "is_bot": false,
          "headline": "ci: Ensure both README are the same and prost version is correct  (#1…",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-27T18:28:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cbf941bb304f7431910b0657e723e1fe3aa2c3e",
          "body": "libz-sys is a optional dependency of a private crate that is never enabled.",
          "is_bot": false,
          "headline": "build(deps): Remove unused libz-sys (#1077)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-27T07:37:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a7bba0b241984fb8e6377600cd714a189e308c4",
          "body": "Add a new UnknownEnumValue error type to prost,\nchange the TryFrom<i32> conversions generated for enums to use that\nas the associated Error type. The error value carries the original\ninteger, making it also more informative than DecodeError.",
          "is_bot": false,
          "headline": "Lightweight error value in TryFrom<i32> for enums (#1010)",
          "author_name": "Mikhail Zabaluev",
          "author_login": "mzabaluev",
          "committed_at": "2024-05-27T07:19:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "683091ae47c84545e22ee70ebbb1bbead9a8990e",
          "body": "The release scripts were broken by moving `prost` crate into a separated directory in #1033.\n\nfixes #1054",
          "is_bot": false,
          "headline": "build: Fix release scripts (#1055)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-24T16:18:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eec717bd632ab2d6ba97a389bb491fa5ac7cb6b5",
          "body": "…rrs (#951)\n\n* better checking of tag duplicates, avoid discarding invalid variant errors\n\n* add some simple derive tests :)\n\n* use itertools duplicates()\n\n* don't print out unreadable syn junk when encountering unknown attributes\n\n* clarify and test backstop for the \"multiple tags in a oneof varian\n[…]\nsper Meijn <casper@meijn.net>\n\n* update the other instance of the .tuple_windows() trick to use .duplicates()\n\n* clarify & shorten assertion\n\n---------\n\nCo-authored-by: Casper Meijn <casper@meijn.net>",
          "is_bot": false,
          "headline": "better checking of tag duplicates, avoid discarding invalid variant e…",
          "author_name": "Kent Ross",
          "author_login": "mumbleskates",
          "committed_at": "2024-05-24T10:01:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b9c4d3d537adfb0fa468a06ef9fdc10b497c17ae",
          "body": "Updates the requirements on [criterion](https://github.com/bheisler/criterion.rs) to permit the latest version.\n- [Changelog](https://github.com/bheisler/criterion.rs/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/bheisler/criterion.rs/compare/0.4.0...0.5.1)\n\n---\nupdated-dependencies:\n- de\n[…]\nndency-name: criterion\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): update criterion requirement from 0.4 to 0.5 (#1071)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-05-23T14:17:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f8a0e012cbd37e0c968c7ef09724de9388b8d5bc",
          "body": "Updates the requirements on [env_logger](https://github.com/rust-cli/env_logger) to permit the latest version.\n- [Release notes](https://github.com/rust-cli/env_logger/releases)\n- [Changelog](https://github.com/rust-cli/env_logger/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/rust-cli/env_l\n[…]\ndency-name: env_logger\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "build(deps): update env_logger requirement from 0.10 to 0.11 (#1074)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-05-23T14:15:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1ff42bffa832cdd98a0ff31da4bb5618e6b506c9",
          "body": null,
          "is_bot": false,
          "headline": "ci: Add Dependabot (#957)",
          "author_name": "Shaun Jackman",
          "author_login": "sjackman",
          "committed_at": "2024-05-23T13:39:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "993a6d132187a95c624bab527440e280e2f58af8",
          "body": "Add a job that only finished if all tests pass. This will be configured as a required test to make sure all jobs pass on every commit.",
          "is_bot": false,
          "headline": "ci: Add all tests pass job (#1069)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-22T13:20:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b925a4fdfbc46ccef5f59c7cb223fe227c0cebda",
          "body": "Instead of rebuilding everything with Rust 1.70 (MSRV), use `cargo hack` to only build published crates at their specified `rust-version`.\n\nCo-authored-by: tottoto <tottotodev@gmail.com>",
          "is_bot": false,
          "headline": "chore: Add ci to check MSRV (#1057)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-22T11:30:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2ce9edbf3267d1dd2ce1533ac6eb1134e7eb783",
          "body": "Due to two pull requests changing the same function a build error occurred. `fields` has move to inside `oneof` and has changed type.",
          "is_bot": false,
          "headline": "fix: Build error due to merge conflict (#1068)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-21T13:32:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bb5a1fa388ed198ce96dde39796d314dffa8c162",
          "body": "* Change generated functions signatures to remove type parameters; fixes #1042\n\n* Add test to confirm no type shadowing\n\n* Change generated functions signatures to remove type parameters (rest of ::prost::Message trait)\n\n* Change functions signatures to avoid generic type parameters",
          "is_bot": false,
          "headline": "Change generated functions signatures to remove type parameters (#1045)",
          "author_name": "Denis Fakhrtdinov",
          "author_login": "shizzard",
          "committed_at": "2024-05-20T16:42:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85c698a288bd2ae94cde44109f853214fb00915f",
          "body": "* feat: derive Copy trait for messages where possible\n\nRust primitive types can be copied by simply copying the bits. Rust structs can also have this property by deriving the Copy trait.\n\nAutomatically derive Copy for:\n- messages that only have fields with primitive types\n- the Rust enum for one-of \n[…]\nGenerated code for Protobuf enums already derives Copy.\n\n* fix: Remove clone call when copy is implemented\n\nClippy reports: warning: using `clone` on type `Timestamp` which implements the `Copy` trait",
          "is_bot": false,
          "headline": "feat: derive Copy trait for messages where possible (#950)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-20T16:28:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d42c85e790263f78f6c626ceb0dac5fda0edcb41",
          "body": null,
          "is_bot": false,
          "headline": "chore: fix prost release script (#1066)",
          "author_name": "Lucio Franco",
          "author_login": "LucioFranco",
          "committed_at": "2024-05-17T15:59:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d43f7e0533b7b81e74d32346068971dc7fe5343f",
          "body": "_PROST!_ is a [Protocol Buffers](https://developers.google.com/protocol-buffers/) implementation for the [Rust Language](https://www.rust-lang.org/). `prost` generates simple, idiomatic Rust code from `proto2` and `proto3` files.\n\nThis patch update fixes a regression:\n\n- fix(prost-build): re-export `error_message_protoc_not_found`, `protoc_from_env` & `protoc_include_from_env` (#1063)",
          "is_bot": false,
          "headline": "chore: Release version 0.12.6 (#1065)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-17T15:57:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b1131539bd551968fa66a369108f38912726c10",
          "body": "…_from_env` & `protoc_include_from_env` (#1063)\n\nfixes: #1062\n\nI'm adding to fix a breaking change introduced in https://github.com/tokio-rs/prost/pull/1020\nwhich moved these items.\n\nSince `0.12.5` this is causing build failures after `cargo update`.\n\n```\n   Compiling grpc-build v6.1.0\nerror[E0432]:\n[…]\nenv, Module};\n  |                   ^^^^^^^^^^^^^^^  ^^^^^^^^^^^^^^^^^^^^^^^ no `protoc_include_from_env` in the root\n  |                   |\n  |                   no `protoc_from_env` in the root\n```",
          "is_bot": false,
          "headline": "fix(prost-build): re-export `error_message_protoc_not_found`, `protoc…",
          "author_name": "Ethan Brierley",
          "author_login": "eopb",
          "committed_at": "2024-05-17T15:03:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "26405ab8754219f101f489fe7bb2b74432b9b4b8",
          "body": "The release of version 0.12.5 is blocked because of a build error of the packed crate. prost/src/lib.rs refers to a README file that is outside of the published crate.\n\nDuplicate the main README into the prost crate to unblock the release",
          "is_bot": false,
          "headline": "fix: Duplicate README to fix release (#1052)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-08T17:30:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "548739ac15b052f8d27e261064616b0398b32b20",
          "body": "_PROST!_ is a [Protocol Buffers](https://developers.google.com/protocol-buffers/) implementation for the [Rust Language](https://www.rust-lang.org/). `prost` generates simple, idiomatic Rust code from `proto2` and `proto3` files.\n\nThis patch update brings new fixes:\n\n- fix: include_file should handl\n[…]\nrks (#1037)\n- chore: Update internal crates to Rust edition 2021 (#1039)\n- chore: Update crate descriptions (#1038)\n- chore: Fix clippy checks in CI (#1032)\n- chore: Add Casper Meijn as author (#1025)",
          "is_bot": false,
          "headline": "chore: Release version 0.12.5 (#1050)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-08T16:41:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "baddf9828596bb7e2b908f5d4997542ebe59a7c3",
          "body": "* fix #1001 and add tests\n\n* add alloc:: imports\n\n* rewrite write_includes to allow for empty modules.\n\n* create test fixture for `write_includes`\n\n* fix lints, remove line feeds\n\n* fixes after merge master\n\n* remove some duplicate tests and alter existing ones to test write_includes\n\n* more test\n\n* module.rs Module::starts_with visibility",
          "is_bot": false,
          "headline": "fix: include_file should handle proto without package (#1002)",
          "author_name": "Maxi Barmetler",
          "author_login": "MixusMinimax",
          "committed_at": "2024-05-05T19:35:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f38ea600478bf22b0b812cc788553a9e3019531",
          "body": "* prost-build: CodeGenerator::boxed method\n\nA helper method to capture the logic of deciding whether a field\nneeds to be boxed. This follows the pattern with other methods like\n`optional`, and will allow reusing the logic in the upcoming builder\ncodegen.\n\n* prost-build: more reuse with CodeGenerator\n[…]\nt-build: document CodeGenerator::boxed\n\n* prost-build: only emit warning on repeated fields\n\nCo-authored-by: Casper Meijn <casper@meijn.net>\n\n---------\n\nCo-authored-by: Casper Meijn <casper@meijn.net>",
          "is_bot": false,
          "headline": "prost-build: `CodeGenerator::boxed` method (#1019)",
          "author_name": "Mikhail Zabaluev",
          "author_login": "mzabaluev",
          "committed_at": "2024-05-05T19:28:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2308ba466650ebdc8c865fdbda98a2efa9963274",
          "body": "the badge image has been incorrect and not reflective of CI status since august 2023 (9c877ce32ec0c465e437144c1bf4a27cb3aa705c).",
          "is_bot": false,
          "headline": "fix the link and badge for CI (#1049)",
          "author_name": "Kent Ross",
          "author_login": "mumbleskates",
          "committed_at": "2024-05-05T19:20:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "71b8e8e8042b4a544158932304c6be03c06b9b2a",
          "body": "* tests: Remove unused dependencies\n\nFound these unused dependencies using: `cargo +nightly udeps && cargo +nightly udeps --all-targets`\n\n* ci: Add cargo-udeps",
          "is_bot": false,
          "headline": "tests: Remove unused dependencies (#1043)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-05-03T08:40:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "680a2e19c77a1ca7559373f383e5cb3422174ab3",
          "body": "* prost-build: consolidate message field data\n\nWhen massaging field data in CodeGenerator::append_message,\nmove it into lists of Field and OneofField structs so that later\ngeneration passes can operate on the data with less code duplication.\n\nSubsidiary append_* methods are changed to take reference\n[…]\nreuse of Field\n\nMake rust_field into a method computing the name on the fly.\nIn OneofField, make the vector of fields to have Field members.\nDon't play reference renaming tricks with field.descriptor.",
          "is_bot": false,
          "headline": "style(prost-build): Consolidate field data into struct (#1017)",
          "author_name": "Mikhail Zabaluev",
          "author_login": "mzabaluev",
          "committed_at": "2024-04-29T17:28:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "43753be89764ace6d6c2497e61d6ba8d043f6b89",
          "body": null,
          "is_bot": false,
          "headline": "style: Fix toml indent (#1048)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-04-29T16:58:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f2536b28119fe6b91e29eeb18db7de5af281ae1",
          "body": null,
          "is_bot": false,
          "headline": "chore - codegen: `Syntax` to a separate file (#1029)",
          "author_name": "Gabriel Hansson",
          "author_login": "gibbz00",
          "committed_at": "2024-04-28T17:30:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee96a0430787e208ba41bc5af9304e2618e585ed",
          "body": null,
          "is_bot": false,
          "headline": "fix: #1021 (#1022)",
          "author_name": "Gabriel Hansson",
          "author_login": "gibbz00",
          "committed_at": "2024-04-28T17:29:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b607e9bec3d69d35e37127e76226bb5aacee5425",
          "body": "Many tests from `prost-build` wrote to the same temporary directory. Therefore these tests overwrite each other files. Because `cargo test` runs multi threaded some tests failed sometimes.",
          "is_bot": false,
          "headline": "tests: Create a separate tempdir for each test (#1044)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-04-28T17:27:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a21d90c189e2bcd1b5c056232c7a991975957b88",
          "body": "The published crates were already using edition 2021. Update all internal crates as well.\n\nAlso add a new tests-2018 crate that runs all tests using edition 2018.",
          "is_bot": false,
          "headline": "chore: Update internal crates to Rust edition 2021 (#1039)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-04-28T17:26:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95dcb0eae8bb019aa3cd2494311d63ab5780ade6",
          "body": "Each published crate should have a unique description.",
          "is_bot": false,
          "headline": "chore: Update crate descriptions (#1038)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-04-28T11:38:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "691454307ccd2de4c780438da8acf2a1ddd994f6",
          "body": "Co-authored-by: Casper Meijn <casper@meijn.net>",
          "is_bot": false,
          "headline": "ci: Add TOML validation with `taplo` (#1034)",
          "author_name": "Gabriel Hansson",
          "author_login": "gibbz00",
          "committed_at": "2024-04-26T09:12:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a53ad5173f3b64bdd2faf4ef8c99efc5ab8d6b30",
          "body": "…030)",
          "is_bot": false,
          "headline": "prost_build: `BytesType and MapType` into a `collections` module. (#1…",
          "author_name": "Gabriel Hansson",
          "author_login": "gibbz00",
          "committed_at": "2024-04-26T08:04:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fc736ef7840ad986e7f6e185c242489e97f3400",
          "body": "The dataset for these benchmarks are not distributed in upstream protobuf. Therefore they fail when running `cargo bench --workspace`.\n\nFixes #1005\n\nOpen question:\n- Are these datasets available for download? If yes, we could add them to the repo.",
          "is_bot": false,
          "headline": "Remove GoogleMessage3 and GoogleMessage4 benchmarks (#1037)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-04-23T14:16:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "215ae16f4a2826444d285e99f0733d0f82955751",
          "body": "…1033)\n\nRemoves the need to always specify append `--workspace` in the common\ncargo commands.\n\n`rust-analyser` seems to get confused and locks the workspace longer\nthan needed under the previous structure. (Lots of `Blocking waiting\nfor file lock on build directory` waiting.) Unable to find an issue\n[…]\naged. Examples:\n\n* Consolidate crate package metadata, dependency versions and clippy\nlints in the workspace `Cargo.toml`\n\n* Placing all crates in a `crates/` for automatic workspace member\ninclucion.",
          "is_bot": false,
          "headline": "chore: separate prost `Cargo.toml` workspace and crate declaration (#…",
          "author_name": "Gabriel Hansson",
          "author_login": "gibbz00",
          "committed_at": "2024-04-22T14:20:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0381b93fcbb3301411590a8927f4157b2f09816a",
          "body": null,
          "is_bot": false,
          "headline": "chore - codegen: extract c string escaping to a separate file (#1028)",
          "author_name": "Gabriel Hansson",
          "author_login": "gibbz00",
          "committed_at": "2024-04-19T13:51:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30b22d38f0d29bed2bca6a1cac1a9051fdd2443f",
          "body": "…iles (#1020)\n\n* build: split `Config` into a separate module\n\n* build: split `Module` into a separate module",
          "is_bot": false,
          "headline": "prost-build: Split `Config` and `Module` into a separate module and f…",
          "author_name": "Gabriel Hansson",
          "author_login": "gibbz00",
          "committed_at": "2024-04-19T13:50:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eee2de02446d6530ded45159d816b921651539f9",
          "body": "* chore: Fix needless borrow\n\n* ci: Clippy requires checking out submodules\n\n* ci: Exclude `protobuf` project from clippy",
          "is_bot": false,
          "headline": "chore: Fix clippy checks in CI (#1032)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-04-19T13:21:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3deaa200b3a5500bf0403325d02716973b7296a",
          "body": "Instead of downloading a tarball, use a submodule to get the protobuf sources. Newer versions of protobuf require recursive submodules for its dependencies",
          "is_bot": false,
          "headline": "build: Use git submodule to download protobuf sources (#1014)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-04-12T19:05:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95e2658bbce80d1f9ebeec6340cb19c039c1873d",
          "body": null,
          "is_bot": false,
          "headline": "chore: Add Casper Meijn as author (#1025)",
          "author_name": "Casper Meijn",
          "author_login": "caspermeijn",
          "committed_at": "2024-04-12T12:52:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04be6049ea676dde5dfac8a21da2559f4f380ed2",
          "body": "* prost: clarify encoding test buffer copying:\n\nfixes `noop_method_call` clippy lint warning.\n\n* ci: add lint checking step:\n\n* Makes that the entrire workspace is checked, but tests too.\n\n* chore: fix `needless_borrow` lints\n\n* chore: fix `needless_return` lints\n\n* chore: remove noop clippy allows\n\n[…]\nts\n\n* chore: fix `unnecessary_cast` lints\n\n* chore: fix `slow_vector_initialization` lints\n\n* chore: fix `assigning_clones` lints\n\n* chore: fix `unused_import` lints\n\n* chore: fix `single_match` lints",
          "is_bot": false,
          "headline": "Fix clippy warnings and enable clippy in CI (#1008)",
          "author_name": "Gabriel Hansson",
          "author_login": "gibbz00",
          "committed_at": "2024-04-09T15:05:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 2,
      "commits_last_year": 0,
      "latest_release_at": "2024-12-06T15:17:23Z",
      "latest_release_tag": "v0.13.4",
      "releases_from_tags": true,
      "days_since_last_push": 21,
      "active_weeks_last_year": 0,
      "days_since_latest_release": 597,
      "mean_days_between_releases": 97.8
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "prost",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "protobuf",
            "serialization",
            "encoding"
          ],
          "ecosystem": "crates",
          "matches_repo": false,
          "registry_url": "https://crates.io/crates/prost",
          "is_deprecated": false,
          "latest_version": "0.14.4",
          "repository_url": "https://github.com/tokio-rs/prost",
          "versions_count": 46,
          "total_downloads": 504111032,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 40093253,
          "first_published_at": "2017-06-25T07:39:15.991516Z",
          "latest_published_at": "2026-06-07T10:13:40.918481Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 49
        },
        {
          "name": "protobuf",
          "exists": true,
          "license": "BSD-3-Clause",
          "keywords": [],
          "ecosystem": "crates",
          "matches_repo": null,
          "registry_url": "https://crates.io/crates/protobuf",
          "is_deprecated": false,
          "latest_version": "3.7.2",
          "repository_url": null,
          "versions_count": 177,
          "total_downloads": 162263641,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 12090138,
          "first_published_at": "2014-11-21T00:30:41.855088Z",
          "latest_published_at": "2026-07-09T21:37:34.405786Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 16
        },
        {
          "name": "conformance",
          "exists": true,
          "license": "MIT OR Apache-2.0",
          "keywords": [
            "serde",
            "conformance",
            "testing",
            "development-tools::testing"
          ],
          "ecosystem": "crates",
          "matches_repo": false,
          "registry_url": "https://crates.io/crates/conformance",
          "is_deprecated": false,
          "latest_version": "0.2.0",
          "repository_url": "https://github.com/CAD97/tinyc/tree/master/crates/conformance",
          "versions_count": 2,
          "total_downloads": 3258,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 6,
          "first_published_at": "2019-10-04T21:22:24.766678Z",
          "latest_published_at": "2019-10-10T17:37:40.401696Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 2481
        },
        {
          "name": "prost-build",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [],
          "ecosystem": "crates",
          "matches_repo": false,
          "registry_url": "https://crates.io/crates/prost-build",
          "is_deprecated": false,
          "latest_version": "0.14.4",
          "repository_url": "https://github.com/tokio-rs/prost",
          "versions_count": 47,
          "total_downloads": 312813431,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 22054618,
          "first_published_at": "2017-06-25T07:40:34.848805Z",
          "latest_published_at": "2026-06-07T10:14:03.681322Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 49
        },
        {
          "name": "prost-types",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [],
          "ecosystem": "crates",
          "matches_repo": false,
          "registry_url": "https://crates.io/crates/prost-types",
          "is_deprecated": false,
          "latest_version": "0.14.4",
          "repository_url": "https://github.com/tokio-rs/prost",
          "versions_count": 42,
          "total_downloads": 395386075,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 29327814,
          "first_published_at": "2017-09-10T19:19:37.407643Z",
          "latest_published_at": "2026-06-07T10:13:51.361558Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 49
        },
        {
          "name": "prost-derive",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [],
          "ecosystem": "crates",
          "matches_repo": false,
          "registry_url": "https://crates.io/crates/prost-derive",
          "is_deprecated": false,
          "latest_version": "0.14.4",
          "repository_url": "https://github.com/tokio-rs/prost",
          "versions_count": 42,
          "total_downloads": 495163187,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 38534055,
          "first_published_at": "2017-06-25T07:38:48.366541Z",
          "latest_published_at": "2026-06-07T10:13:30.605513Z",
          "latest_version_yanked": false,
          "days_since_latest_publish": 49
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": true,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [
        "prost-build/src/fixtures/alphabet/a.proto",
        "prost-build/src/fixtures/alphabet/b.proto",
        "prost-build/src/fixtures/alphabet/c.proto",
        "prost-build/src/fixtures/alphabet/d.proto",
        "prost-build/src/fixtures/alphabet/e.proto",
        "prost-build/src/fixtures/alphabet/f.proto",
        "prost-build/src/fixtures/field_attributes/field_attributes.proto",
        "prost-build/src/fixtures/helloworld/goodbye.proto",
        "prost-build/src/fixtures/helloworld/hello.proto",
        "prost-build/src/fixtures/helloworld/types.proto",
        "prost-build/src/fixtures/imports_empty/imports_empty.proto",
        "prost-build/src/fixtures/smoke_test/smoke_test.proto",
        "tests/single-include/protos/outdir.proto",
        "tests/single-include/protos/search.proto",
        "tests/src/boxed_field.proto",
        "tests/src/custom_attributes.proto",
        "tests/src/custom_debug.proto",
        "tests/src/default_enum_value.proto",
        "tests/src/default_string_escape.proto",
        "tests/src/deprecated_field.proto",
        "tests/src/derive_copy.proto",
        "tests/src/enum_keyword_variant.proto",
        "tests/src/groups.proto",
        "tests/src/ident_conversion.proto",
        "tests/src/include/google/protobuf/any.proto",
        "tests/src/include/google/protobuf/api.proto",
        "tests/src/include/google/protobuf/compiler/plugin.proto",
        "tests/src/include/google/protobuf/descriptor.proto",
        "tests/src/include/google/protobuf/duration.proto",
        "tests/src/include/google/protobuf/empty.proto",
        "tests/src/include/google/protobuf/field_mask.proto",
        "tests/src/include/google/protobuf/source_context.proto",
        "tests/src/include/google/protobuf/struct.proto",
        "tests/src/include/google/protobuf/timestamp.proto",
        "tests/src/include/google/protobuf/type.proto",
        "tests/src/include/google/protobuf/wrappers.proto",
        "tests/src/invalid_doctest.proto",
        "tests/src/nesting.proto",
        "tests/src/no_package.proto",
        "tests/src/no_root_packages/gizmo.proto",
        "tests/src/no_root_packages/root.proto",
        "tests/src/no_root_packages/widget.proto",
        "tests/src/no_root_packages/widget_factory.proto",
        "tests/src/no_shadowed_types.proto",
        "tests/src/no_unused_results.proto",
        "tests/src/oneof_attributes.proto",
        "tests/src/option_enum.proto",
        "tests/src/option_struct.proto",
        "tests/src/packages/gizmo.proto",
        "tests/src/packages/root.proto",
        "tests/src/packages/widget.proto",
        "tests/src/packages/widget_factory.proto",
        "tests/src/proto3_presence.proto",
        "tests/src/recursive_oneof.proto",
        "tests/src/result_enum.proto",
        "tests/src/result_struct.proto",
        "tests/src/submessage_without_package.proto",
        "tests/src/type_names.proto",
        "tests/src/well_known_types.proto",
        "third_party/old_protobuf_benchmarks/benchmarks.proto",
        "third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto",
        "third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto",
        "third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto"
      ],
      "has_devcontainer": true,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "Cargo.toml",
        "benchmarks/Cargo.toml",
        "conformance/Cargo.toml",
        "fuzz/Cargo.toml",
        "fuzz/afl/proto3/Cargo.toml",
        "prost-build/Cargo.toml",
        "prost-derive/Cargo.toml",
        "prost-types/Cargo.toml",
        "prost/Cargo.toml",
        "protobuf/Cargo.toml",
        "tests-2015/Cargo.toml",
        "tests-2018/Cargo.toml",
        "tests-no-std/Cargo.toml",
        "tests/Cargo.toml",
        "tests/single-include/Cargo.toml"
      ],
      "largest_source_bytes": 94767,
      "source_files_sampled": 84,
      "oversized_source_files": 1,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml",
        "benchmarks/Cargo.toml",
        "conformance/Cargo.toml",
        "fuzz/Cargo.toml",
        "prost-build/Cargo.toml",
        "prost-derive/Cargo.toml",
        "prost-types/Cargo.toml",
        "prost/Cargo.toml",
        "protobuf/Cargo.toml",
        "tests-2015/Cargo.toml",
        "tests-2018/Cargo.toml",
        "tests-no-std/Cargo.toml",
        "tests/Cargo.toml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 62,
        "malicious_count": 0,
        "assessed_package": "crates:prost@0.14.4",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates"
      ],
      "dependencies": [
        {
          "name": "bytes",
          "manifest": "conformance/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "env_logger",
          "manifest": "conformance/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.11"
        },
        {
          "name": "prost",
          "manifest": "conformance/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "protobuf",
          "manifest": "conformance/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "tests",
          "manifest": "conformance/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "bytes",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "heck",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": ">=0.4, <=0.5"
        },
        {
          "name": "itertools",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": ">=0.10, <=0.13"
        },
        {
          "name": "log",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.4.4"
        },
        {
          "name": "multimap",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": ">=0.8, <=0.10"
        },
        {
          "name": "petgraph",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.6"
        },
        {
          "name": "prost",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.13.3"
        },
        {
          "name": "prost-types",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.13.3"
        },
        {
          "name": "tempfile",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "3"
        },
        {
          "name": "once_cell",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.17.1"
        },
        {
          "name": "regex",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.8.1"
        },
        {
          "name": "prettyplease",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.2"
        },
        {
          "name": "syn",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2"
        },
        {
          "name": "pulldown-cmark",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.12"
        },
        {
          "name": "pulldown-cmark-to-cmark",
          "manifest": "prost-build/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": ">=16, <=17"
        },
        {
          "name": "anyhow",
          "manifest": "prost-derive/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.1"
        },
        {
          "name": "itertools",
          "manifest": "prost-derive/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": ">=0.10.1, <=0.13"
        },
        {
          "name": "proc-macro2",
          "manifest": "prost-derive/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.60"
        },
        {
          "name": "quote",
          "manifest": "prost-derive/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "syn",
          "manifest": "prost-derive/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2"
        },
        {
          "name": "prost",
          "manifest": "prost-types/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.13.3"
        },
        {
          "name": "bytes",
          "manifest": "prost/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "prost-derive",
          "manifest": "prost/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.13.3"
        },
        {
          "name": "prost",
          "manifest": "protobuf/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "prost-types",
          "manifest": "protobuf/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "anyhow",
          "manifest": "tests-2015/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.1"
        },
        {
          "name": "cfg-if",
          "manifest": "tests-2015/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "prost",
          "manifest": "tests-2015/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "prost-types",
          "manifest": "tests-2015/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "protobuf",
          "manifest": "tests-2015/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "anyhow",
          "manifest": "tests-2018/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.1"
        },
        {
          "name": "bytes",
          "manifest": "tests-2018/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "cfg-if",
          "manifest": "tests-2018/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "prost",
          "manifest": "tests-2018/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "prost-types",
          "manifest": "tests-2018/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "protobuf",
          "manifest": "tests-2018/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "anyhow",
          "manifest": "tests-no-std/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1.0.45"
        },
        {
          "name": "cfg-if",
          "manifest": "tests-no-std/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "1"
        },
        {
          "name": "prost",
          "manifest": "tests-no-std/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "prost-types",
          "manifest": "tests-no-std/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 10
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "danburkert",
          "commits": 313,
          "avatar_url": "https://avatars.githubusercontent.com/u/160242?v=4"
        },
        {
          "type": "User",
          "login": "caspermeijn",
          "commits": 74,
          "avatar_url": "https://avatars.githubusercontent.com/u/1286074?v=4"
        },
        {
          "type": "User",
          "login": "LucioFranco",
          "commits": 48,
          "avatar_url": "https://avatars.githubusercontent.com/u/5758045?v=4"
        },
        {
          "type": "User",
          "login": "tottoto",
          "commits": 19,
          "avatar_url": "https://avatars.githubusercontent.com/u/16907501?v=4"
        },
        {
          "type": "User",
          "login": "gibbz00",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/31696304?v=4"
        },
        {
          "type": "User",
          "login": "briansmith",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/16816?v=4"
        },
        {
          "type": "User",
          "login": "mumbleskates",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/6464813?v=4"
        },
        {
          "type": "User",
          "login": "neoeinstein",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/18165?v=4"
        },
        {
          "type": "User",
          "login": "mzabaluev",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/1198919?v=4"
        },
        {
          "type": "User",
          "login": "ldm0",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/31354274?v=4"
        }
      ],
      "contributors_sampled": 99,
      "top_contributor_share": 0.514
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "cifuzz.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 20 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 10,
            "reason": "project is fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "9ed944eb633480079037dfceeee61aac6cd0c94f",
        "ran_at": "2026-07-26T20:46:59Z",
        "aggregate_score": 4.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [],
      "last_merged_pr_at": null,
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/caspermeijn/prost",
    "host": "github.com",
    "name": "prost",
    "owner": "caspermeijn"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 42,
      "inputs": {
        "security": 58,
        "vitality": 37,
        "community": 34,
        "governance": 47,
        "engineering": 36
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "at_risk",
        "name": "Vitality",
        "value": 37,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 29,
            "inputs": {
              "commits_last_year": 0,
              "human_commit_share": 0.94,
              "days_since_last_push": 21,
              "active_weeks_last_year": 0
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 21 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 21
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "0/52 weeks with commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "0 commits in the last year",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "releases_count": 2,
              "latest_release_tag": "v0.13.4",
              "releases_from_tags": true,
              "days_since_latest_release": 597,
              "mean_days_between_releases": 97.8
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "2 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 597 days ago",
                "points": 7.2,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 597
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~97.8 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 97.8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "dormant",
              "guards": [
                "no_open_demand",
                "dependencies_clean"
              ],
              "signals": [
                "release_stall",
                "scorecard_unmaintained",
                "sole_maintainer_gone"
              ],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 0,
              "unanswered_open_issues": 0,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 673,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 673 days, with nothing left unanswered; held at dormant by nothing open to answer, no affected dependency",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_quiet",
                    "params": {
                      "days": 673
                    }
                  },
                  {
                    "code": "abandonment_guarded",
                    "params": {
                      "guards": "nothing open to answer, no affected dependency"
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 34,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "excellent",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "packages": [
                "protobuf"
              ],
              "dependents": null,
              "ecosystems": "crates",
              "total_downloads": 162263641,
              "monthly_downloads": 12090138
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "12,090,138 downloads/month across crates",
                "points": 80,
                "status": "met",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 12090138,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 47,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 43,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 99,
              "top_contributor_share": 0.514
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 51% of commits",
                "points": 10.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 51
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "99 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 99
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 20 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 10
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "0/10 decided PRs merged",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 0,
                      "decided": 10
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 54,
            "inputs": {
              "followers": 13,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "caspermeijn",
              "public_repos": 105,
              "account_age_days": 5326
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "13 followers of caspermeijn",
                "points": 8.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 13,
                      "login": "caspermeijn"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "105 public repos, account ~14 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 105
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 14
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "protobuf"
              ],
              "ecosystems": "crates",
              "any_deprecated": false,
              "min_days_since_publish": 16
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on crates",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "crates"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 16 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 16
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "177 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 177
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 36,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "critical",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": false,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 58,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 47,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 4.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 20 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is fuzzed",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the crates:prost@0.14.4 runtime dependency closure — what installing the published package pulls in — 62 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "crates:prost@0.14.4",
                  "assessed": 62
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 62,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 62,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 11
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 58,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "94 of 94 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 94,
                      "sampled": 94
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_nix": true,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": true,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "Cargo.toml",
                "benchmarks/Cargo.toml",
                "conformance/Cargo.toml",
                "fuzz/Cargo.toml",
                "fuzz/afl/proto3/Cargo.toml",
                "prost-build/Cargo.toml",
                "prost-derive/Cargo.toml",
                "prost-types/Cargo.toml",
                "prost/Cargo.toml",
                "protobuf/Cargo.toml",
                "tests-2015/Cargo.toml",
                "tests-2018/Cargo.toml",
                "tests-no-std/Cargo.toml",
                "tests/Cargo.toml",
                "tests/single-include/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0.06
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Cargo.toml, benchmarks/Cargo.toml, conformance/Cargo.toml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "Cargo.toml, benchmarks/Cargo.toml, conformance/Cargo.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Rust (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "devcontainer, Nix",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "devcontainer, Nix"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "6 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 6,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Rust",
              "largest_source_bytes": 94767,
              "source_files_sampled": 84,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Rust (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Rust"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/84 source files over 60KB",
                "points": 54.3,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 84,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": false,
              "api_schema_files": [
                "prost-build/src/fixtures/alphabet/a.proto",
                "prost-build/src/fixtures/alphabet/b.proto",
                "prost-build/src/fixtures/alphabet/c.proto",
                "prost-build/src/fixtures/alphabet/d.proto",
                "prost-build/src/fixtures/alphabet/e.proto",
                "prost-build/src/fixtures/alphabet/f.proto",
                "prost-build/src/fixtures/field_attributes/field_attributes.proto",
                "prost-build/src/fixtures/helloworld/goodbye.proto",
                "prost-build/src/fixtures/helloworld/hello.proto",
                "prost-build/src/fixtures/helloworld/types.proto",
                "prost-build/src/fixtures/imports_empty/imports_empty.proto",
                "prost-build/src/fixtures/smoke_test/smoke_test.proto",
                "tests/single-include/protos/outdir.proto",
                "tests/single-include/protos/search.proto",
                "tests/src/boxed_field.proto",
                "tests/src/custom_attributes.proto",
                "tests/src/custom_debug.proto",
                "tests/src/default_enum_value.proto",
                "tests/src/default_string_escape.proto",
                "tests/src/deprecated_field.proto",
                "tests/src/derive_copy.proto",
                "tests/src/enum_keyword_variant.proto",
                "tests/src/groups.proto",
                "tests/src/ident_conversion.proto",
                "tests/src/include/google/protobuf/any.proto",
                "tests/src/include/google/protobuf/api.proto",
                "tests/src/include/google/protobuf/compiler/plugin.proto",
                "tests/src/include/google/protobuf/descriptor.proto",
                "tests/src/include/google/protobuf/duration.proto",
                "tests/src/include/google/protobuf/empty.proto",
                "tests/src/include/google/protobuf/field_mask.proto",
                "tests/src/include/google/protobuf/source_context.proto",
                "tests/src/include/google/protobuf/struct.proto",
                "tests/src/include/google/protobuf/timestamp.proto",
                "tests/src/include/google/protobuf/type.proto",
                "tests/src/include/google/protobuf/wrappers.proto",
                "tests/src/invalid_doctest.proto",
                "tests/src/nesting.proto",
                "tests/src/no_package.proto",
                "tests/src/no_root_packages/gizmo.proto",
                "tests/src/no_root_packages/root.proto",
                "tests/src/no_root_packages/widget.proto",
                "tests/src/no_root_packages/widget_factory.proto",
                "tests/src/no_shadowed_types.proto",
                "tests/src/no_unused_results.proto",
                "tests/src/oneof_attributes.proto",
                "tests/src/option_enum.proto",
                "tests/src/option_struct.proto",
                "tests/src/packages/gizmo.proto",
                "tests/src/packages/root.proto",
                "tests/src/packages/widget.proto",
                "tests/src/packages/widget_factory.proto",
                "tests/src/proto3_presence.proto",
                "tests/src/recursive_oneof.proto",
                "tests/src/result_enum.proto",
                "tests/src/result_struct.proto",
                "tests/src/submessage_without_package.proto",
                "tests/src/type_names.proto",
                "tests/src/well_known_types.proto",
                "third_party/old_protobuf_benchmarks/benchmarks.proto",
                "third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto",
                "third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto",
                "third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "prost-build/src/fixtures/alphabet/a.proto, prost-build/src/fixtures/alphabet/b.proto, prost-build/src/fixtures/alphabet/c.proto, prost-build/src/fixtures/alphabet/d.proto, prost-build/src/fixtures/alphabet/e.proto, prost-build/src/fixtures/alphabet/f.proto, prost-build/src/fixtures/field_attributes/field_attributes.proto, prost-build/src/fixtures/helloworld/goodbye.proto, prost-build/src/fixtures/helloworld/hello.proto, prost-build/src/fixtures/helloworld/types.proto, prost-build/src/fixtures/imports_empty/imports_empty.proto, prost-build/src/fixtures/smoke_test/smoke_test.proto, tests/single-include/protos/outdir.proto, tests/single-include/protos/search.proto, tests/src/boxed_field.proto, tests/src/custom_attributes.proto, tests/src/custom_debug.proto, tests/src/default_enum_value.proto, tests/src/default_string_escape.proto, tests/src/deprecated_field.proto, tests/src/derive_copy.proto, tests/src/enum_keyword_variant.proto, tests/src/groups.proto, tests/src/ident_conversion.proto, tests/src/include/google/protobuf/any.proto, tests/src/include/google/protobuf/api.proto, tests/src/include/google/protobuf/compiler/plugin.proto, tests/src/include/google/protobuf/descriptor.proto, tests/src/include/google/protobuf/duration.proto, tests/src/include/google/protobuf/empty.proto, tests/src/include/google/protobuf/field_mask.proto, tests/src/include/google/protobuf/source_context.proto, tests/src/include/google/protobuf/struct.proto, tests/src/include/google/protobuf/timestamp.proto, tests/src/include/google/protobuf/type.proto, tests/src/include/google/protobuf/wrappers.proto, tests/src/invalid_doctest.proto, tests/src/nesting.proto, tests/src/no_package.proto, tests/src/no_root_packages/gizmo.proto, tests/src/no_root_packages/root.proto, tests/src/no_root_packages/widget.proto, tests/src/no_root_packages/widget_factory.proto, tests/src/no_shadowed_types.proto, tests/src/no_unused_results.proto, tests/src/oneof_attributes.proto, tests/src/option_enum.proto, tests/src/option_struct.proto, tests/src/packages/gizmo.proto, tests/src/packages/root.proto, tests/src/packages/widget.proto, tests/src/packages/widget_factory.proto, tests/src/proto3_presence.proto, tests/src/recursive_oneof.proto, tests/src/result_enum.proto, tests/src/result_struct.proto, tests/src/submessage_without_package.proto, tests/src/type_names.proto, tests/src/well_known_types.proto, third_party/old_protobuf_benchmarks/benchmarks.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto, third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "prost-build/src/fixtures/alphabet/a.proto, prost-build/src/fixtures/alphabet/b.proto, prost-build/src/fixtures/alphabet/c.proto, prost-build/src/fixtures/alphabet/d.proto, prost-build/src/fixtures/alphabet/e.proto, prost-build/src/fixtures/alphabet/f.proto, prost-build/src/fixtures/field_attributes/field_attributes.proto, prost-build/src/fixtures/helloworld/goodbye.proto, prost-build/src/fixtures/helloworld/hello.proto, prost-build/src/fixtures/helloworld/types.proto, prost-build/src/fixtures/imports_empty/imports_empty.proto, prost-build/src/fixtures/smoke_test/smoke_test.proto, tests/single-include/protos/outdir.proto, tests/single-include/protos/search.proto, tests/src/boxed_field.proto, tests/src/custom_attributes.proto, tests/src/custom_debug.proto, tests/src/default_enum_value.proto, tests/src/default_string_escape.proto, tests/src/deprecated_field.proto, tests/src/derive_copy.proto, tests/src/enum_keyword_variant.proto, tests/src/groups.proto, tests/src/ident_conversion.proto, tests/src/include/google/protobuf/any.proto, tests/src/include/google/protobuf/api.proto, tests/src/include/google/protobuf/compiler/plugin.proto, tests/src/include/google/protobuf/descriptor.proto, tests/src/include/google/protobuf/duration.proto, tests/src/include/google/protobuf/empty.proto, tests/src/include/google/protobuf/field_mask.proto, tests/src/include/google/protobuf/source_context.proto, tests/src/include/google/protobuf/struct.proto, tests/src/include/google/protobuf/timestamp.proto, tests/src/include/google/protobuf/type.proto, tests/src/include/google/protobuf/wrappers.proto, tests/src/invalid_doctest.proto, tests/src/nesting.proto, tests/src/no_package.proto, tests/src/no_root_packages/gizmo.proto, tests/src/no_root_packages/root.proto, tests/src/no_root_packages/widget.proto, tests/src/no_root_packages/widget_factory.proto, tests/src/no_shadowed_types.proto, tests/src/no_unused_results.proto, tests/src/oneof_attributes.proto, tests/src/option_enum.proto, tests/src/option_struct.proto, tests/src/packages/gizmo.proto, tests/src/packages/root.proto, tests/src/packages/widget.proto, tests/src/packages/widget_factory.proto, tests/src/proto3_presence.proto, tests/src/recursive_oneof.proto, tests/src/result_enum.proto, tests/src/result_struct.proto, tests/src/submessage_without_package.proto, tests/src/type_names.proto, tests/src/well_known_types.proto, third_party/old_protobuf_benchmarks/benchmarks.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto2/benchmark_message1_proto2.proto, third_party/old_protobuf_benchmarks/datasets/google_message1/proto3/benchmark_message1_proto3.proto, third_party/old_protobuf_benchmarks/datasets/google_message2/benchmark_message2.proto"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Community profile unavailable",
    "crates package 'prost' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring",
    "Could not fetch crates package 'tests-2015' from its registry",
    "Could not fetch crates package 'tests-2018' from its registry",
    "crates package 'conformance' points at a different repository (https://github.com/CAD97/tinyc/tree/master/crates/conformance); excluded from ecosystem scoring",
    "crates package 'prost-build' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring",
    "crates package 'prost-types' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring",
    "crates package 'prost-derive' points at a different repository (https://github.com/tokio-rs/prost); excluded from ecosystem scoring",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-26T20:47:14.546868Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/caspermeijn/prost.svg",
  "full_name": "caspermeijn/prost",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаcrates.io.