Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-28 06:43 UTC

darvaza-proxy / core

fundamental set of helpers for darvaza projects

GoMIT★ 1 зірка⑂ 0 форківз лют. 2023 р.Переглянути на GitHub ↗

darvaza-proxy/core має індекс здоров’я 67 зі 100, що відповідає смузі «Помірний». Найвищий показник — Vitality (89/100), найнижчий — Community & Adoption (24/100). Останнє оновлення було 5 днів тому. Більшість нещодавньої роботи виконує один учасник.

67
загалом / 100
Помірний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

67
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

Darvaza ProxyОрганізація
5 підписників17 публічних репозиторіївз вер. 2021 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікація
Godarvaza.org/corev0.21.2-906 днів тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

89Відмінний · 22% загального індексу
Як обчислюється оцінка
36/36Свіжість push — останній push 5 дн. тому
17.3/36Ритм комітів — 25/52 тижнів із комітами
18/18Обсяг комітів — 145 комітів за останній рік
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Використані вхідні дані
commits_last_year145
human_commit_share0,91
days_since_last_push5
active_weeks_last_year25
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 15 релізів
36/36Свіжість релізів — останній реліз 5 дн. тому
27/27Ритм релізів — реліз кожні ~37,3 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count15
latest_release_tagv0.21.2
releases_from_tagsні
days_since_latest_release5
mean_days_between_releases37,3
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

24Критичний · 18% загального індексу
Як обчислюється оцінка
0/60Зірки — 1 зірок
0/25Форки — 0 форків
0/15Спостерігачі — 2 спостерігачів
Використані вхідні дані
forks0
stars1
watchers2
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (MIT)
0/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingні
has_issue_templateні
has_code_of_conductні
has_pull_request_templateні

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

57Помірний · 24% загального індексу
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
3.2/22.5Розподіл комітів — головний контриб’ютор — автор 86% комітів
2.7/13.5Широта контриб’юторів — 2 контриб’юторів
10/10OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations
Використані вхідні дані
bus_factor1
contributors_sampled2
top_contributor_share0,858
Як обчислюється оцінка
23.4/46.8Вирішення issue — закрито 50% issue
36.4/38.3Прийняття PR — злито 161/169 вирішених PR
4.5/15OpenSSF Scorecard: Code-Review — Found 2/6 approved changesets -- score normalized to 3
Використані вхідні дані
merged_prs161
open_issues1
closed_issues1
issue_closed_ratio0,5
closed_unmerged_prs8
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
5.6/25Охоплення власника — 5 підписників у darvaza-proxy
18.9/25Послужний список — 17 публічних репозиторіїв, вік облікового запису ~4 р.
Використані вхідні дані
followers5
owner_typeOrganization
is_verified
owner_logindarvaza-proxy
public_repos17
account_age_days1 783

Супровід пакетів

100Відмінний
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у go
35/35Свіжість публікацій — остання публікація 6 дн. тому
20/20Історія версій — 90 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesdarvaza.org/core
ecosystemsgo
any_deprecatedні
min_days_since_publish6

Інженерна якість

Чи наявні базові інженерні практики та документація?

84Добрий · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 6 процес(ів) CI
24/24Наявні тести
16/16Конфігурація лінтера — .golangci.yml
0/9.6Pre-commit-хуки
6.4/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 8 out of 8 merged PRs checked by a CI test -- score normalized to 10
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigтак
has_linter_configтак
has_precommit_configні
Як обчислюється оцінка
30/30README
0/25Каталог документації
15/15Сайт документації / домашня сторінка — https://darvaza.org/core
10/10Опис репозиторію
10/10Теми — 3 тем
10/10Wiki
Використані вхідні дані
topicsgo, darvaza, golang
has_wikiтак
homepagehttps://darvaza.org/core
has_readmeтак
has_docs_dirні
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

78Добрий · 16% загального індексу
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — немає даних
2.5/2.5CI-Tests — 8 out of 8 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
2.2/7.5Code-Review — Found 2/6 approved changesets -- score normalized to 3
2.5/2.5Contributors — project has 6 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — немає даних
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
5/5SAST — SAST tool is run on all commits
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — немає даних
6.8/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate7,2
Виключено з оцінювання (немає даних або не застосовно): branch_protection, packaging, signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
35/35Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
0/25Непрямі залежності без відомих сповіщень — транзитивний набір не відокремлюється від залежностей розробки й тестування в цьому обсязі
0/40Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
sourceosv
advisories0
affected_packages0
assessed_packages2
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Виключено з оцінювання (немає даних або не застосовно): Непрямі залежності без відомих сповіщень, Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено 2 резолвлених залежностей із OSV. Цей репозиторій не публікує пакета, який резолвить індекс, тож натомість оцінено граф залежностей репозиторію. Цей граф змішує закріплені версії для розробки й тестування зі справді постачаними залежностями, тож оцінюються лише задекларовані runtime-залежності; транзитивні знахідки подаються як контекст і в оцінку не входять. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

85Відмінний · 0% загального індексу
Як обчислюється оцінка
45/45Інструкції для агентів — AGENTS.md
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 91 з 91 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share1
agent_instruction_filesAGENTS.md
agent_instruction_max_bytes4 145
Як обчислюється оцінка
18/18Розгортання однією командою — Makefile
22/22Автоматизовані тести
11/11Конфігурація лінтера / форматера — .golangci.yml
11/11Статична перевірка типів — Go (статично типізована)
10/10Відтворюване середовище — lockfile
0/10Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом
8/8Автоматизоване супроводження — 9 з останніх 100 комітів — автоматичні оновлення залежностей
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsтак
lockfilesgo.sum
has_dockerfileні
typed_languageтак
bootstrap_filesMakefile
has_devcontainerні
has_linter_configтак
typecheck_configs
agent_commit_share0
toolchain_manifestsgo.mod
dependency_bot_commit_share0,09
Як обчислюється оцінка
45/45Типізований код — Go (статично типізована)
53.7/55Керовані розміри файлів — 1/41 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageGo
largest_source_bytes60 194
source_files_sampled41
oversized_source_files1

Ключові факти

1зірок GitHub
2контриб'юторів
145комітів за останні 12 місяців
5днів від останнього пушу
15релізів
1бас-фактор
1відкритих issue
Goпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

Докладніше

OpenSSF Scorecard 7.2 / 10
7.2сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-28 06:43 UTC

10Binary-Artifactsno binaries found in the repo
н/дBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests8 out of 8 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
3Code-ReviewFound 2/6 approved changesets -- score normalized to 3
10Contributorsproject has 6 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
н/дPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
10SASTSAST tool is run on all commits
0Security-Policysecurity policy file not detected
н/дSigned-Releasesno releases found
9Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Прямі залежності 1
РеєстрПакетОбмеження версіїМаніфест
Gogolang.org/x/netv0.57.0go.mod
Усі залежності 2

Повний розв'язаний набір залежностей із графа залежностей GitHub: 1 прямих і 1 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
Gogolang.org/x/netv0.57.0пряма
Gogolang.org/x/textv0.40.0непряма
Сповіщення про залежності 0

Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 2 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 0 мають відомі сповіщення, з них 0 прямі.

Жодне відоме сповіщення не стосується оцінених залежностей.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [
        "go",
        "darvaza",
        "golang"
      ],
      "is_fork": false,
      "size_kb": 731,
      "has_wiki": true,
      "homepage": "https://darvaza.org/core",
      "languages": {
        "Go": 556545,
        "Shell": 24005,
        "Makefile": 6872
      },
      "pushed_at": "2026-07-23T00:47:11Z",
      "created_at": "2023-02-26T16:31:29Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-23T00:47:13Z",
      "description": "fundamental set of helpers for darvaza projects",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://darvaza.org",
      "name": "Darvaza Proxy",
      "type": "Organization",
      "login": "darvaza-proxy",
      "company": null,
      "location": "United Kingdom",
      "followers": 5,
      "avatar_url": "https://avatars.githubusercontent.com/u/90329990?v=4",
      "created_at": "2021-09-08T13:35:20Z",
      "is_verified": null,
      "public_repos": 17,
      "account_age_days": 1783
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.21.2",
          "kind": "patch",
          "published_at": "2026-07-22T22:53:10Z"
        },
        {
          "tag": "v0.21.1",
          "kind": "patch",
          "published_at": "2026-07-21T13:51:06Z"
        },
        {
          "tag": "v0.21.0",
          "kind": "minor",
          "published_at": "2026-07-19T22:54:20Z"
        },
        {
          "tag": "v0.20.0",
          "kind": "minor",
          "published_at": "2026-07-07T21:51:50Z"
        },
        {
          "tag": "v0.19.1",
          "kind": "patch",
          "published_at": "2026-05-28T15:34:07Z"
        },
        {
          "tag": "v0.19.0",
          "kind": "minor",
          "published_at": "2026-04-17T20:15:45Z"
        },
        {
          "tag": "v0.18.5",
          "kind": "patch",
          "published_at": "2025-11-06T13:44:02Z"
        },
        {
          "tag": "v0.18.4",
          "kind": "patch",
          "published_at": "2025-10-27T22:11:03Z"
        },
        {
          "tag": "v0.18.3",
          "kind": "patch",
          "published_at": "2025-09-07T19:44:26Z"
        },
        {
          "tag": "v0.18.2",
          "kind": "patch",
          "published_at": "2025-08-20T23:23:39Z"
        },
        {
          "tag": "v0.18.1",
          "kind": "patch",
          "published_at": "2025-08-08T19:53:13Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2025-08-04T16:25:39Z"
        },
        {
          "tag": "v0.17.5",
          "kind": "patch",
          "published_at": "2025-07-30T03:11:41Z"
        },
        {
          "tag": "v0.17.4",
          "kind": "patch",
          "published_at": "2025-07-18T17:02:27Z"
        },
        {
          "tag": "v0.17.3",
          "kind": "patch",
          "published_at": "2025-07-15T20:09:37Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "d4e45a79c34a35f6513ef92d58bb45f9fc3f21a6",
          "body": "build: make the native tidy check portable and run it on the platform runners",
          "is_bot": false,
          "headline": "Merge pull request #171",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-23T00:47:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd2b1f27009a1b3f139a23f3d1ce0dd0505b8cb9",
          "body": "Reuse the macOS and Windows test boxes rather than spend runners on a\nseparate tidy job: run make tidy on every cell — the linter version is\nselected per Go version, so each tier enforces its own rules — then git\ndiff --exit-code fails, printing the patch, on anything it leaves behind.\n\ncore has no \n[…]\nkeeps make tidy runnable\nnatively on macOS and Windows, so a future contributor on either can run\nthe gate rather than discover a GNU-ism the hard way.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "ci: run make tidy on the platform runners",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-21T23:25:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "93ca1106ef8b78918d0c752503cbfe9b62df029e",
          "body": "markdownlint-cli2 is the actively developed CLI and bundles a newer\nmarkdownlint core. Point the pnpm dlx detection and the fmt invocation at\nit in place of markdownlint-cli.\n\ncli2 has no --version flag, so probe it with --help: the banner\n(markdownlint-cli2 vX.Y.Z …) prints to stdout and the comman\n[…]\nry over unchanged, and the top-level-rules\nmarkdownlint.json is accepted verbatim as the --config base, so the flags\nand the config file are untouched.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: upgrade markdownlint-cli to markdownlint-cli2",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-21T23:25:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9284329f41e901887aa7374ac11b7dc527e277d7",
          "body": "The build scripts carry GNU-isms that never bit on Linux but break where\nmake tidy runs on BSD or Windows userland, as it will on the platform\nrunners. Fix them so the reformat is portable.\n\nchmod --reference is a GNU extension; BSD chmod on macOS rejects it and\naborts the reformat. There is no POSI\n[…]\nevery text file to LF (* text=auto\neol=lf), so the Windows checkout matches .editorconfig and make tidy's\ngit diff --exit-code does not trip over CRLF.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "fix(build): make the native tidy check portable on macOS and Windows",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-21T23:25:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "acd3e8562d97dbecce186a039ea6e1d4b3209918",
          "body": "revert: return error sentinels to identity matching",
          "is_bot": false,
          "headline": "Merge pull request #170",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-21T22:54:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5869947ff51d6b88d1b649dd346cdde81419a1f9",
          "body": "net.IP is a slice carrying an Equal method, so AreEqual now settles it:\nreplace the hand-written got.Equal(want) checks in the ParseNetIP and\nasNetIP tests with AssertEqual, which honours that method.\n\nGuard the result[2] index in TestAsNetIPAddresses with AssertMustEqual\non the length, so a short s\n[…]\ntion rather than\npanicking. Keep the byte-length assertions — Equal treats a 4-byte and a\n16-byte form as equal, so only the length pins the unmapping.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "test: assert net.IP equality through AssertEqual",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-21T15:49:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "94dc9b133a89bdcfb5e41722d9f02ca3d4ba8fa6",
          "body": "Back out \"refactor: make error sentinels StringError constants\",\nrestoring ErrNotImplemented, ErrExists, ErrNotExists, ErrUnknown,\nErrNilReceiver and ErrUnreachable to errors.New values.\n\nAs StringError constants they matched by value, so any StringError\ncarrying the same text — including one declar\n[…]\napable error explicitly.\n\nErrTODO and ErrInvalid are unaffected; they were already vars.\n\nThis reverts commit 61be274d3c38b6db755d52db37ee31c770d1ae4c.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "revert: return error sentinels to identity matching",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-21T15:46:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "70b3177b05cf01619bd328e78e4ba50ad564dc73",
          "body": "fix: honour Equal when == calls a comparable pair unequal",
          "is_bot": false,
          "headline": "Merge pull request #169",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-21T13:32:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af29275475f31950a39798e734c95f372932aa02",
          "body": "AsError's type parameter binds to its argument, so AsErrors can let it\nbe inferred rather than spelling out AsError[T](v).\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "refactor: drop the inferable type argument on the AsError call",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-21T13:19:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ac61c618235e38af66c0530f79742c86329eda8",
          "body": "AreEqual tested values of the same comparable type with == alone, so a\ntype whose == distinguishes more than its own notion of equality\ncompared wrong: time.Time by its monotonic reading, and a pointer type\nthat defines Equal (an *x509.Certificate, a *big.Int) by identity.\nAssertEqual, AssertNotEqua\n[…]\n. The eqAlways fixture and its row now\nassert that Equal rescues a false ==, and a new eqNeverComparable\nfixture pins that a true == still skips Equal.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "fix: honour an Equal method when == calls a comparable pair unequal",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-21T13:19:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "abc90bdc5bc2bad3d8efa2f15f5705c8902d9204",
          "body": "feat: decide Assert equality with AreEqual, add the DeepEqual family",
          "is_bot": false,
          "headline": "Merge pull request #168",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-19T21:52:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "630d3466619ee7449f3f663e78ac7de2aaa60bc0",
          "body": "AssertEqual and AssertNotEqual compared with ==, which the comparable\nconstraint made the compiler enforce: a slice, a map, or any type with\nan Equal(T) bool method could not be asserted on at all. Widen them to\nany and delegate to AreEqual, which settles typed nils, identity, an\nEqual method, and s\n[…]\nred to, most checking only that the assertion did not abort, and\nnow all of them check the failure marker, the error, and whether the\ncontinuation ran.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "feat: decide Assert equality with AreEqual",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-19T21:23:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c940a4e65c21dce3e6cc67339e3224501b4ffc51",
          "body": "\"build: generate a make vet target\" added GOVET_FLAGS to the Makefile\nand deferred the documentation, but the follow-up never reached the\nEnvironment Variables list. Add it. GOUP_FLAGS gains its default in\nthe same breath: both are `?= -v`, and listing one default but not the\nother implies the secon\n[…]\n; describe what platforms.yml actually does, including the\ngate, since BUILDING.md is the shared reference for sibling repos that\nhave yet to adopt it.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "docs: close two BUILDING.md gaps left by the vet and Platforms work",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-19T15:03:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "10ff1bc87484b8cab625f9e44a47dc87a7feb3e4",
          "body": "ci: test natively on macOS and Windows, gated on Linux",
          "is_bot": false,
          "headline": "Merge pull request #167",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-19T11:56:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "460f94c4b5b3498cbf519bcc70cf8159f3e2f05e",
          "body": "Until now the test and race suites ran on Linux only. Add native macOS\nand Windows runs, folded with the Linux ones into a single Platforms\nworkflow. The premium macOS and Windows runners start only after the\ncheap Linux gates pass: make vet cross-compiles the Windows and Darwin\ntargets, and Linux r\n[…]\nwin, and lint never runs\non the premium runners.\n\nDrop the separate test.yml and race.yml, and update the build-system\ndoc's workflow listing to match.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "ci: add cross-platform test and race behind a Linux gate",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-18T20:51:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dbeed20dd613a66f22e4ef921817cac4fdf18d21",
          "body": "Switch every job from ubuntu-latest to depot-ubuntu-latest so the\nworkflows run on Depot's faster runners. Linux-only, so the vet GOOS\nmatrix and the rest of each job are unchanged.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "ci: run workflows on Depot runners",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-18T20:23:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30370229be756ded370c2ff585296dc38b358c68",
          "body": "The verbose flag streams every package name and PASS line, drowning the\nsignal in CI logs without adding diagnostic value on a green run; failures\nalready print their own output. Run make test and make race with the\ndefault (empty) GOTEST_FLAGS instead.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "ci: drop -v from the test and race suites",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-18T20:23:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a3a36be6de832565bbc052691834a7b3f8d694e",
          "body": "Pushing again to a branch left the previous build, test, race, and\ncodecov runs churning to completion, burning runners on results no\none waits for.\n\nGive each workflow a concurrency group keyed on the ref, with\ncancel-in-progress, so a fresh push cancels the in-flight run on the\nsame branch and only the latest commit's results survive.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "ci: cancel superseded workflow runs per ref",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-18T15:32:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c568fb82066075964db63daf568619cbca3752bc",
          "body": "gen_index.sh assigned to GROUPS, but GROUPS is a special variable in\nbash: the array of the invoking user's group IDs. Under bash 3.2 in\nPOSIX mode — which is what macOS ships as /bin/sh — assigning to it is\na readonly error, and set -e turns that into a silent abort. Index\ngeneration exits 1 having\n[…]\nto GROUP_PREFIXES. That also lets the SC2178/SC2128\nshellcheck suppressions go: they were only needed because shellcheck\nrecognised GROUPS as an array.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "fix(build): rename GROUPS to avoid bash's special variable",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-18T15:32:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6397a54b903e2864cbdab30e3fdf0de55b0100e1",
          "body": "TMPDIR holds the build's own generated files — the module index, the\nsubproject rules, coverage output — but '?=' only assigns it when the\nvariable is unset. macOS always exports TMPDIR (/var/folders/.../T/,\ntrailing slash), so on macOS the build inherited the system temp:\ngenerated makefiles writte\n[…]\nke-out only surfaced this on macOS.\n\nAssign with ':=' so the makefile overrides the environment; a\ncommand-line 'make TMPDIR=…' still takes precedence.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: pin TMPDIR to the repo scratch dir",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-18T15:32:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "166b48f7f5ab4c41397f9c78dc2b57b2a481084a",
          "body": "The index and rule-generation scripts hardcode GNU coreutils (find,\ngrep, sed, sort, tr, cut, column, xargs) and lean on GNU-only\nbehaviour — sort -V, xargs -r, and \\+/[ \\t] in sed and grep\nexpressions. On BSD userland such as macOS the system tools lack\nthese, so the build fails before any test run\n[…]\nnd grep\nin the build recipe — are parameterised as well; the latter replaces\na bare grep whose GNU \\+ was silently mistreated as a literal by BSD\ngrep.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: allow overriding external text utilities",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-18T15:32:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "482b550d11a81d9db3bd2ff929d3aa6089493393",
          "body": "The build system generated tidy/build/test/race but no vet, so there\nwas no single command to type-check every module — and, run under a\nforeign GOOS, no way to confirm the tree cross-compiles.\n\nAdd vet to the generated command set: gen_mk.sh emits the aggregate\nvet target and a vet-<module> per mod\n[…]\n=<os> make vet doubles as a cross-platform compile check.\n\nGOOS joins the spell-check dictionary. The build-system documentation\nis updated separately.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: generate a make vet target",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-18T15:32:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fc7fb1ab210f3f42abf1931ed8ab45a2e1a04176",
          "body": "Feed /dev/null on stdin to every tool-detection probe so corepack\ncannot stall a make invocation on an interactive prompt.\n\nLet the markdownlint, languagetool, cspell and shellcheck probes send\ntheir stderr to the terminal instead of merging it into the grep\npipe. When a probe fails the tool resolve\n[…]\nrobe's own\nstderr is the only place that failure surfaces. Keep pnpm's stderr\ndiscarded: there it is corepack interactivity, not an error worth\nseeing.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: stop corepack blocking tool detection",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-18T03:27:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a5fbfe9ea1b8ee3280618ea5a6327f387ce6688",
          "body": "feat: add StringError and migrate error sentinels to constants",
          "is_bot": false,
          "headline": "Merge pull request #164",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-17T19:20:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "060ade42f9fcfbaa8f94517eff8116d89417bacc",
          "body": "chore(deps): update actions/setup-node action to v7",
          "is_bot": false,
          "headline": "Merge pull request #165 (ci)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-16T18:23:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8161edf5960965e56730ea87e02c40e0069e879d",
          "body": "chore(deps): update actions/setup-go action to v7",
          "is_bot": false,
          "headline": "Merge pull request #166 (ci)-",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-16T18:22:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4264c1b5de46b858c5db9e89594f0af81f1bbd91",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-go action to v7",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-16T05:40:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e7dfa6bac297431f3ae91877620ffe9b7d3ba32",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-node action to v7",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-14T04:23:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61be274d3c38b6db755d52db37ee31c770d1ae4c",
          "body": "Redefine the leaf sentinels as StringError constants so they can't be\nreassigned; matching shifts from pointer identity to value equality.\n\nErrTODO stays a var — it wraps ErrNotImplemented at init — and ErrInvalid\nstays an alias of fs.ErrInvalid to keep identity across the fs boundary.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "refactor: make error sentinels StringError constants",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-11T21:48:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3495cd907e62d170e12b276d79c1d24fcbe81b26",
          "body": "Its message is the string value itself, so error sentinels can be typed\nconstants rather than package-level variables; equal text compares\nequal, so errors.Is matches by value without an Is method.\n\nStringError follows the package's error conventions: AsError() and OK()\ntreat an empty string as \"no error\", IsZero() feeds into IsZero, and\nNewStringError() formats a message, returning nil when it is empty.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "feat: add StringError, a constant-capable error type",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-11T21:34:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9eee8b8dbddec6723a3a628542ea617680722b0",
          "body": "fix(deps): update module golang.org/x/net to v0.57.0",
          "is_bot": false,
          "headline": "Merge pull request #144 (deps)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-09T21:09:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce21cb9e5d2f9546843c6a538fc7ca7771d86c63",
          "body": null,
          "is_bot": true,
          "headline": "fix(deps): update module golang.org/x/net to v0.57.0",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-07-08T23:47:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e65a382ced1cc66a225b5fcf99547d9a44973310",
          "body": "errors: Is-method matching, absence assertions, and comparison helpers",
          "is_bot": false,
          "headline": "Merge pull request #163 (errors)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T20:08:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f4e486d4baa0aae7af90549ce793a1743383f15",
          "body": "The primitive and interface arms of isSamePointer called Interface()\nunconditionally, panicking on reflect.Values reached through\nunexported struct fields. Such values are now reported as not same\ninstead — they cannot be unwrapped, so no comparison is possible.\nThe same path was reachable through AreEqual's fallback, which now\nreports unknown for them.\n\nAdd table-driven tests covering both arms, in each direction, for\nIsSame and AreEqual.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "fix: guard IsSame against reflect.Values that cannot be unwrapped",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T19:39:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7776f8847b1dd130f7da852261014dea3a3e9919",
          "body": "Slices left undecided by nil, identity, or a decisive Equal method\nare now walked element by element: lengths must match, and each\nelement pair is decided like a top-level pair — interface elements\nunwrapped first — except that nested slices are not walked; those\nstill settle only by nil, identity, \n[…]\nn unequal.\n\nAdd table-driven tests for the element walk, precedence, fall-through\nand one-level boundaries, and update the AreEqual notes in README.md.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "feat: compare slices element by element in AreEqual, one level deep",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T19:39:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bbbb0c7c0510984b163d681fc853d20dcfe428b",
          "body": "AreComparable answers whether == can panic on the given values: a\ntrue result guarantees no comparison between them can, and untyped\nnils are safe operands. AreEqual reports whether each value equals\nthe next as == would decide, without ever panicking: values of the\nsame comparable type use == itsel\n[…]\nnd is reflected\nonly once.\n\nAdd table-driven tests covering the comparable, nil, identity and\nEqual-method paths, and list both functions in README.md.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "feat: add AreEqual and AreComparable comparison helpers",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T19:39:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "db0e0e0e5b1d6afb23c44bcc6ee0fa20d1abab07",
          "body": "AssertErrorIs, AssertErrorIsFn and AssertErrorAs all assert\npresence; asserting absence took AssertFalse over a bare errors.Is\ncall. AssertNotErrorIs closes the gap: it passes when errors.Is\nfinds no match in the chain. A nil error passes against any non-nil\ntarget, and fails against a nil target — \n[…]\nREADME.md and TESTING.md. Add the missing AssertErrorIsFn and\nAssertErrorAs entries to the TESTING_core.md dependency tree along\nwith the new function.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "feat: add AssertNotErrorIs assertion",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T19:39:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f62dc749b7c6436e84d7f390aa1850f618e77ee2",
          "body": "IsError matched targets by identity only; wrapped standard sentinels\nand errors relying on Is(error) bool methods went undetected. Each\nchain node now gets the same per-node test errors.Is applies:\nidentity first, then the node's own Is method — never the target's.\nIdentity comes first because the s\n[…]\no shallow and unwrapped halves, retiring their\ncognitive-complexity waivers. Add acceptance and closure tests, and\nlist the new functions in README.md.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "feat: match errors by their own Is method in IsError",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T19:01:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11fe62da33d4217b67b47b1c46f15461bc50cd08",
          "body": "A typed nil counts as non-nil: it panics unmatched, matches by\nidentity in the allowed list and via predicate, and survives into\nthe panic chain unchanged. MustNoError(ErrUnreachable) takes the\nplain no-cause panic shape — NewUnreachableError treats the bare\nsentinel as carrying no distinct cause — \n[…]\ner suppress a panic.\n\nDocument the typed-nil and no-cause behaviour on MustNoError and\nthe inert nil entries on MustNoErrorExcept. No behaviour change.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "test: pin MustNoError* edge-case behaviour",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T18:16:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0cb619c8d5f2b898838902ad134917937c0a9b6d",
          "body": "AssertErrorIsFn checks an error chain against a predicate via\nIsErrorFn; AssertErrorAs extracts a typed error from the chain via\nerrors.As, returning a pointer to the match. Constraining the type\nparameter to error makes a non-error type argument a compile error\ninstead of an errors.As panic at runt\n[…]\nants terminating on failure, MockT-driven\ntests covering the match, mismatch and nil branches, and list the\nnew assertions in README.md and TESTING.md.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "feat: add AssertErrorIsFn and AssertErrorAs assertions",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T18:16:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9df00e05ac17b9b01609e6b426df331e85ac3518",
          "body": "The message text is identical (\"invalid argument\"), so aliasing\nchanges no output while letting errors.Is match across the boundary\nwith fs.ErrInvalid and os.ErrInvalid without help from IsError.\n\nAdd a regression test locking in identity, cross-boundary matching,\nand the message text. Update the TESTING.md example to assert against\nthe real core.ErrInvalid sentinel instead of a made-up one.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "fix: alias ErrInvalid to fs.ErrInvalid",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T18:16:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4dbf5f577110b4713ae9100d4ed148f9218557cc",
          "body": "The config lives in internal/build/, so bare patterns resolve\nrelative to the config file's directory instead of the repository\nroot. Prefix them with **/ so they apply wherever the walk starts.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: anchor cspell ignorePaths at any depth",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T18:16:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f010b62c962641944a05953cb5f85bd74e5cf0d9",
          "body": "slices: deprecate the helpers with direct stdlib slices counterparts",
          "is_bot": false,
          "headline": "Merge pull request #162 (slices)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T17:55:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6c55bf616c7a68e28b414bd7d82bc9efeb332f9",
          "body": "Seven helpers duplicate functions the standard library slices\npackage now provides one-to-one: SliceContains, SliceEqual,\nSliceEqualFn, SliceCopy, SliceSort, SliceSortOrdered and\nSliceReverse. Mark them Deprecated, pointing each at its\nreplacement (slices.Contains, Equal, EqualFunc, Clone, SortFunc,\n[…]\n\n\nThe speciality helpers without a stdlib equivalent -- the Fn\nvariants, SliceMap, SliceUnique/Uniquify, SliceMinus and the rest\n-- are left untouched.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "slices: deprecate the helpers with direct stdlib slices counterparts",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T17:40:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d0d8614f1d970195f479588a742a56758466ea2c",
          "body": "build: require Go 1.25+, update x/net to v0.56.0",
          "is_bot": false,
          "headline": "Merge pull request #161",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T17:07:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a892c0034ca2facbcb93bb507bd9a760c15f7520",
          "body": "The golang.org/x/net HTML-parser denial-of-service fix\n(GHSA-5cv4-jp36-h3mw) landed in v0.55.0, but x/net has declared\ngo 1.25 since v0.51.0, so taking it means dropping 1.24 from the\nsupported matrix. This moves to the current v0.56.0 (v0.50.0 ->\nv0.56.0), which also pulls x/text v0.34.0 -> v0.39.0\n[…]\ntes to sync.WaitGroup.Go.\n\nUpdate the CI matrices, prerequisite docs, and correct Renovate's\nstale Go constraint (1.22 -> 1.25) to match the new floor.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: raise Go floor to 1.25 for the golang.org/x/net security update",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T16:30:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a9e6173137b981dda8a94f2a07f8f65c0f2dd2c6",
          "body": "chore(deps): update dependency node to v24",
          "is_bot": false,
          "headline": "Merge pull request #147 (deps)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-07-07T00:57:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3887d7447aaa271edb09c49ac84342b23db10f06",
          "body": "chore(deps): update actions/checkout action to v7",
          "is_bot": false,
          "headline": "Merge pull request #158 (deps)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-06-29T15:47:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fbd906c12ae7efd26ad82fea08f6130b95b03f10",
          "body": "build: prune .srclight and .claude from file walks",
          "is_bot": false,
          "headline": "Merge pull request #159",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-06-29T15:36:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ed4ce6a5c324e71c482c6fcd88443dacc52cf6d",
          "body": "The whitespace fixer and make's file-walk rules descended into\n.srclight and .claude, the on-disk homes of the srclight semantic\nindex and Claude Code's session data. Letting the fixer rewrite\n.srclight/index.db — a binary SQLite file — corrupts the index, and\nwalking either tree wastes work on file\n[…]\nch.\n\nPrune both from FIND_FILES_PRUNE_RULES and from the whitespace fixer's\nown prune set, and gitignore .srclight/ so the index never enters the\ntree.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: prune .srclight and .claude from file walks",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-06-29T02:32:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "be6e4865ec3028987ff7c4f872d41b9b95cb642a",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/checkout action to v7",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-06-18T20:15:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f6a78a805b59fa7e69aefc4f97cdca4c99bed92b",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update dependency node to v24",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2026-05-28T15:08:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d965099ddfe5c47960dc39555d43f7a9b08edf7c",
          "body": "feat: add MustNoError error-precondition helpers",
          "is_bot": false,
          "headline": "Merge pull request #157",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-27T23:04:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1fa7f79223f93c52657f362fd1e9a6eb5e175b1",
          "body": "Add MustNoError, MustNoErrorExcept, and MustNoErrorExceptFn to panic.go:\nthe no-value, panic-on-error siblings of Must, for guarding a bare error\nwhose non-nil return signals a path that should be impossible. They wrap\nthe error in ErrUnreachable via NewUnreachableError so recovering code can\nmatch \n[…]\n section.\n\nThese start life as a bridge package in darvaza.org/x/sync; landing them\nhere lets that package's call sites move to core (follow-up there).\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "feat: add MustNoError error-precondition helpers",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-27T20:44:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d81dbc43c21f06a32dffb4c76f57568592f1fbf4",
          "body": "doMessage formats a prefixed message as \"<prefix>: <body>\"; MockT.LastError\nsurfaces that shape so wrapper helpers can assert a name argument was\nforwarded through to an assertion. Document the shape from both ends —\ndoMessage as producer, LastError as consumer — note LastError's\n(\"\", false) empty-Errors return, and add a name-forwarding example.\n\nComment-only; no behaviour change.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "docs: document the \"<prefix>: <body>\" message shape in test helpers",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-27T15:48:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d80ec5c71b5865e9c3c1e6bb89f7ac69732d29be",
          "body": "docs: refactor AGENTS.md / BUILDING.md split, fix factual errors",
          "is_bot": false,
          "headline": "Merge pull request #156 (docs)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-18T00:57:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c13a3227c5a2e4f5a98d94fd0dc020fca577934",
          "body": "README-coverage.md:\n- Go floor: 1.23 → 1.24 (matches the rest of the project).\n- Document the `.stdout` files written by `make_coverage.sh` (raw\n  integration and per-package test output), both in the Generates\n  list and the File Structure tree.\n\nBUILDING.md:\n- Directory tree: add `merge_coverage.s\n[…]\nample to match the actual file\n  (groups `*.md` with `json/yaml`, adds `root = true`,\n  `max_line_length = 80`, and the `[{go.mod,go.sum}]` exemption).\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "docs: fix factual errors in BUILDING.md and README-coverage.md",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-17T20:37:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33f855f40efdec7c202d43837963ea328947260d",
          "body": "BUILDING.md is the canonical reference shared across darvaza.org\nprojects; AGENTS.md is core-specific. Move shared content into\nBUILDING.md, strip per-repo leakage from BUILDING.md, and slim\nAGENTS.md to keep only what is core-specific, with cross-references\nto BUILDING.md sections by anchor.\n\nMoved\n[…]\nngci-lint Configuration\" to match the AGENTS.md cross-reference\nanchor.\n\nNo new facts added and no factual errors fixed; those land in the\nnext commit.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "docs: refactor AGENTS.md / BUILDING.md split for shared vs local content",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-17T20:37:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "43607f99db0a6910b552326734121b0b6b4f58d4",
          "body": "build: force `make test` to bypass the Go test cache",
          "is_bot": false,
          "headline": "Merge pull request #155",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-17T00:43:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f57c9a476f53c87a71b65f8fdfc8dcf3d774df0",
          "body": "Add `-count=1` to the generated `test` rule in\n`internal/build/gen_mk.sh` so `go test` re-executes instead of\nreturning cached results. `race` already carried the flag; `test`\nnow matches. `test` is not part of `make all`, so an explicit\ninvocation should actually run.\n\nUpdate the AGENTS.md `How It \n[…]\n literal rule alongside\nthe `GOTEST_FLAGS` examples — BUILDING.md is the shared reference\nfor sibling darvaza.org repos, so it carries the explanation.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: force `make test` to bypass the Go test cache",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-16T23:24:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b5ed51beef89c65d5df19ecca079a6e5f466fb23",
          "body": "build: sync build-system improvements (coverage, cspell, fieldalign docs)",
          "is_bot": false,
          "headline": "Merge pull request #154",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-12T22:16:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84b2ccdfeed468dfe913060f0856629ff71b0540",
          "body": "Remove the `$schema` pointer from `renovate.json`. The schema\nis already wired up at the editor level, and the in-file URL\nwas actively flagged by the IDE — so it was net-negative,\nnot just noise.\n\nDrop the duplicate `*.test` line from `.gitignore`; the\npattern is already listed earlier in the file.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: drop renovate $schema URL and dedup .gitignore",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-07T21:13:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dea78f63299c1f39852c08e15940350b31cf9bc7",
          "body": "Refactor the coverage system to track two flavours per module:\nintegration (`coverage_<module>.prof`) and self-only\n(`coverage_<module>_self.prof`). Both feed a single `codecov`\nupload but stay separable so each flavour can be inspected and\nmerged independently.\n\n- gen_mk.sh emits explicit file list\n[…]\nheck disable directive (was the bare `2086`).\n- languagetool.cfg: drop `pnpx` from the example list; the\n  build system uses `pnpm dlx` everywhere now.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: split coverage into integration and self profiles",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-07T21:11:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "703769438126d4f336196e46b9fb6adb834d026f",
          "body": "Running `fieldalignment -fix ./...` against the source tree\nstrips every comment from every file it touches, which is\nunacceptable for a library where doc strings carry the API\ncontract. Replace the old \"just run -fix\" recipe in AGENTS.md\nand TESTING.md with a five-step probe workflow:\n\n1. Copy the \n[…]\nthat targets `.tmp/fieldalign.go` instead\nof `./...`.\n\nAdd `fieldalign` to the cspell word list so the new\n`fieldalign.go` references pass spell check.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "docs: document safe fieldalignment workflow via probe file",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-07T21:03:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5380e4e1edc6b95324aab80e4c942ce70833c36e",
          "body": "Bump `pull-requests` and `issues` from `read` to `write` in\nboth Claude Code workflows so the action can post review\ncomments, request changes, and reply to `@claude` mentions.\nWith read-only perms the workflows ran but their output had\nnowhere to land.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "ci(claude): grant write perms on PRs and issues",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-07T20:49:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fcdf012713b1109069160c1ef65a112c7d7aba8",
          "body": "Align the build workflow's matrix key with the `setup-go`\nconvention: rename `matrix.go` to `matrix.go-version` and\nupdate the `actions/setup-go` step accordingly. No change\nto the Go versions tested.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "ci(build): rename matrix variable go → go-version",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-07T20:49:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35b577adf4576e7f432ae867e0f6601923f3c66b",
          "body": "Drop `.vscode/cspell.json` (a symlink to\n`internal/build/cspell.json`) and use cspell's `cSpell.import`\ndirective in `.vscode/settings.json` to point at the shared\ndictionary. Same dictionary, no symlink footprint in the\ncheckout.\n\nThe VS Code cSpell extension honours `cSpell.import` for words,\ndict\n[…]\n\nWhile here, drop the `$schema` URL from\n`internal/build/cspell.json`; the schema is wired up at the\neditor level and the in-file URL only added noise.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "chore(vscode): replace cspell symlink with native import",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-05-07T20:45:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cfb751362607930eb9d09a5e4860a5e7c1da5e47",
          "body": "Build tooling: Claude workflows, markdownlint 120, get_version.sh docs",
          "is_bot": false,
          "headline": "Merge pull request #153",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-04-18T17:10:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ff83402b87a01c7d82420d759822943ea3506a27",
          "body": "The `get_version.sh` helper takes a Go-version baseline and an\nordered list of arbitrary strings; the values need not be tool\nversions, so the same picker can select per-tier config files\nwhen a rule set diverges across releases. Spell this out in\nthe \"Tool Version Selection\" section with a REVIVE_CONF_FILE\nexample, and add a short note under \"Configuration\nCustomisation\" flagging that `revive.toml` may be paired with\nper-tier variants.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "docs(build): document per-tier config selection via get_version.sh",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-04-18T16:54:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4b96ec201f18fb2d19f8500bfa2725a33482f13",
          "body": "Prose stays at 80 but fenced code blocks can now run to 120\nchars. Long shell commands in TESTING.md and AGENTS.md (the\ncoverage-threshold pipeline, the fieldalignment invocation)\nno longer need backslash continuation or shell-variable\ndecomposition to satisfy the linter; unwrap them. Update the\nline-length note in AGENTS.md to reflect the prose/code split.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: raise markdownlint code-block limit to 120",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-04-18T16:54:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f9ec191a6c6db417e0c35abcc347f4ffbf41b8d",
          "body": "- `claude.yml`: respond to `@claude` mentions in issues and\n  pull requests, gated to the `amery` / `karasz` actors.\n- `claude-code-review.yml`: automatic review on non-draft\n  pull requests, using the `code-review` plugin from the\n  anthropics/claude-code-plugins marketplace. Renovate bot\n  excluded.\n\nBoth require the `CLAUDE_CODE_OAUTH_TOKEN` secret on the repo\nor inherited from the org.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "ci: add Claude Code workflows mirroring kagal",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-04-18T16:54:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd997afc33846a6e5f16c0fbc33ffa0a58bf0f4c",
          "body": "build: require Go 1.24+, update x/net to v0.50.0",
          "is_bot": false,
          "headline": "Merge pull request #152",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-04-17T20:04:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c7cf7871c232399468e147d20dd8fc532499641e",
          "body": "Add targeted tests for branches that the existing suite missed, lifting\noverall line coverage from ~97.4% to 99.8%. The additions focus on:\n\n- Nil-receiver paths: WrappedError.Error/Unwrap, CompoundError.OK,\n  ErrGroup.Err on a pristine group.\n- Non-first branches of type switches in Unwrap, CheckIs\n[…]\nllapse branch of AsError.\n- Type-mismatch skipping in ListForEach/ListForEachBackward.\n\nNo production code changes; all additions are `_test.go` files.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "test: close coverage gaps in error, stack, and slice helpers",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-04-17T19:45:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dc8f1a3452465489fb7149e03c2c28469b719e02",
          "body": "Reword the TestCase \"when to use\" guidance so the threshold question —\n≥2 rows of shared-shape data feeding one assertion path — lands before\nthe structural compliance checklist, and demote the 6 MANDATORY\nrequirements into a \"once you've chosen TestCase\" block that cannot\nstand on its own as justif\n[…]\nof\ninstruction that produces forced closure wrappers. Replace it with a\npointer to the decision rule in TESTING.md.\n\nNo API or code changes; docs only.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "docs(testing): tighten TestCase decision rule and anti-patterns",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-04-17T19:45:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "53dca542223ccad60172ad6fc6849ed009ef51f4",
          "body": "Enable golangci-lint's `modernize` linter, which wraps gopls' modernize\nanalyzer suite. It flags outdated idioms so CI catches regressions to\npre-1.22 counted for-loops, pre-1.24 benchmark loops, unnecessary\ngeneric type arguments, and similar.\n\nApply the mechanical rewrites it surfaces:\n\n- Counted \n[…]\nguments are dropped (`S[netip.Addr](…)`\n  → `S(…)`, and the `SortedValuesUnlikelyCond` nil-map call only\n  keeps the one non-inferable type parameter).\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: enable modernize linter",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-04-17T19:44:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a6131ba24017b15214fe39355e6573b338b1d20",
          "body": "v0.50.0 is the last golang.org/x/net release whose go.mod still\ndeclares `go 1.24.0`; subsequent releases require Go 1.25+. Bumping\nin pushes the project's minimum Go version up to 1.24.\n\n- go.mod: go 1.23.0 → 1.24.0, x/net v0.43.0 → v0.50.0 (x/text\n  indirect follows to v0.34.0)\n- CI matrices: shif\n[…]\nUILDING.md, README.md, internal/build/\n  README-coverage.md): reflect the new floor and tool versions,\n  drop stale `go -C` / generics Go-version notes\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: raise minimum Go to 1.24, update x/net to v0.50.0",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-04-17T18:25:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e747e18dcada30887d7851201cb396153230b7a",
          "body": "Apply a set of code quality improvements that newer revive rules\n(enforce-switch-style, unnecessary-format, use-slices-sort,\nidentical-ifelseif-branches) would flag, plus a `prealloc` hint\nsurfaced by `make tidy`:\n\n- add explicit `default:` clauses to non-exhaustive switches in\n  addrs.go, compounde\n[…]\n`quietWrapTestCase.Test` to a single\n  `QuietWrap(err, format, args...)` pass-through, dropping the\n  if/else that split the no-args and variadic cases\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "refactor: clean up switch and test style across core",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-04-17T18:25:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2e2226b19e8c91f173cb7208b94d20cfdbc224bb",
          "body": "build: CI improvements and security hardening",
          "is_bot": false,
          "headline": "Merge pull request #150 (build)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-02-11T17:02:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c3384f6499123b97410cabbd3db474b6f87ca341",
          "body": "- Make MD060 (table-column-style) explicit in markdownlint.json\n- Fix American English spellings across documentation:\n  - \"optimization\" → \"optimisation\"\n  - \"minimize\" → \"minimise\"\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: update markdown tooling and fix British English spelling",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-02-05T14:30:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "258098913bb5b37eafdd74bbc96e1cef9763508a",
          "body": "…oval\n\nAdd parallel file processing via JOBS and FILES_PER_JOB environment\nvariables (defaults: 4, 4) for better performance on large codebases.\n\nNew features:\n- Remove UTF-8 BOM (EF BB BF) from file start\n- Properly remove trailing empty lines, not just trailing whitespace\n- Add .tmp to auto-prune \n[…]\ns(): extract bytes as hex from file head/tail\n- quote_arg(): properly escape arguments for shell\n- filter_file(): apply filter in-place using temp file\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: improve fix_whitespace.sh with parallel processing and BOM rem…",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-02-04T19:28:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e853890c5a2330b2ed967ad64237dbc4b3c16309",
          "body": "pnpx has been deprecated in favor of `pnpm dlx`. This change adds\nproper detection of pnpm availability and uses `pnpm dlx` for running\nmarkdownlint, languagetool, cspell, and shellcheck.\n\nAlso adds GOLANGCI_LINT_RUN_ARGS to suppress stats output and\nrefactors the codecov target to avoid running make_codecov.sh twice.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "build: replace deprecated pnpx with pnpm dlx",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-02-04T16:07:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "878dba540aad389dc9ece09b64c39797975f0f1d",
          "body": "Restrict GITHUB_TOKEN to read-only access following the principle of\nleast privilege. These workflows only need to read repository contents\nand don't require write permissions.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "ci: add explicit permissions to GitHub Actions workflows",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-02-03T17:45:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b15cbda69863cef0a445f1609cf6179533fb68e8",
          "body": "chore(deps): update actions/checkout action to v6",
          "is_bot": false,
          "headline": "Merge pull request #149 (chore)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2026-01-10T19:57:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "13d4d3b49678998b274869821b3ab7c59863986e",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/checkout action to v6",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-11-20T17:45:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c38565971836bdae52660ca4f7a1d8f2cf94a824",
          "body": "slices: introduce SliceP()",
          "is_bot": false,
          "headline": "Merge pull request #148 (slices)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-11-06T13:34:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05ecaea78e8dbe31f2acec06cd2365de704ff6d2",
          "body": "Enhance SliceP documentation to clarify behaviour and constraints:\n- Document valid range for p parameter (0.0-1.0).\n- Clarify in-place sorting behaviour with warning.\n- Document return value for invalid inputs.\n- Improve example code with better variable naming.\n\nRefactor SliceP tests to comply wit\n[…]\n(),\n  slicePStringTestCases() returning []TestCase.\n\nAddresses coderabbitai review comments about documentation clarity\nand function length compliance.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "slices: improve SliceP documentation and test structure",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-11-06T13:25:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "38a1a6cc5a987656517d6b77614cd9df38525a74",
          "body": "returning the p-th percentile of a slice\n\nSigned-off-by: Nagy Károly Gábriel <k@jpi.io>",
          "is_bot": false,
          "headline": "slices: introduce SliceP()",
          "author_name": "Nagy Károly Gábriel",
          "author_login": "karasz",
          "committed_at": "2025-11-05T14:19:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e3b9f02feea8f46643e808e0e39610d081527cd",
          "body": "Testing Infrastructure Enhancement and Documentation Overhaul",
          "is_bot": false,
          "headline": "Merge pull request #145 (testing)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-10-27T18:18:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf593fd676a49c0dc3ecb08b5e76e3c8761f0595",
          "body": "Rename AGENT.md to AGENTS.md as AGENTS.md is now the standard.\nUpdate all internal references within the renamed file and\ncross-references in README.md to maintain documentation integrity.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "docs: rename AGENT.md to AGENTS.md and update references",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-10-27T13:33:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7dfc11bfdb1bdac739656746b28a41f0a3e72fde",
          "body": "This commit addresses multiple documentation issues identified during API\nverification, ensuring all function signatures and descriptions accurately\nreflect the actual implementation.\n\nKey fixes:\n- Fix AddrPort function signature from AddrPort(addr, port) to AddrPort(v)\n  and correct description to \n[…]\nes 100% accurate function signatures that\nmatch the actual Go implementation, improving developer experience and\nreducing confusion when using the API.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "docs: fix API documentation inaccuracies",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-10-27T13:33:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cb30c574002d573f8ace0fa15bdc17ef55ff2778",
          "body": "Add negative variants of string containment assertions to complement the\nexisting AssertContains functionality.\n\nImplementation:\n- Add AssertNotContain to verify substring absence.\n- Add AssertMustNotContain for fatal variant that calls FailNow.\n- Both functions follow established patterns with appr\n[…]\nng and passes linting.\n\nThe implementation provides clear error messages:\n- Success: \"does not contain %q\".\n- Failure: \"expected %q not to contain %q\".\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "feat(testing): add AssertNotContain and AssertMustNotContain assertions",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-10-27T13:33:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0e82405fb1ceb9a695d3416f934316c953c25da4",
          "body": "…ific messaging\n\nConvert AssertError and AssertNoError from derived functions that delegate to\nnil assertions into independent base functions with error-specific messaging.\n\nChanges:\n- AssertError now directly checks err != nil and produces \"expected error, got nil\".\n- AssertNoError now directly che\n[…]\nxisting tests pass.\n\nThis improves clarity when debugging test failures by providing error-oriented\nmessages rather than generic nil-checking messages.\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "refactor(testing): make error assertions independent with domain-spec…",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-10-27T13:33:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2e6c49d977a4f027e10a3a6e78e5089a5eac7002",
          "body": "chore(deps): update actions/setup-node action to v6",
          "is_bot": false,
          "headline": "Merge pull request #146 (deps)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-10-15T16:44:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f5bd7bf7b18aa7c46ad629c85598ce9a96ef34e",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-node action to v6",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-10-14T05:08:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fae8f6b2357c3be1904f0f021f236f1c82cb9e26",
          "body": "refactor(testing): enhance AssertPanic with type-aware matching",
          "is_bot": false,
          "headline": "Merge pull request #143",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-09-07T19:30:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9dad1d1308b4090bbe120027d9130032c9f20de5",
          "body": "Refactored AssertPanic to provide type-specific panic validation,\nmaking tests more resilient to implementation changes whilst\nmaintaining clear intent.\n\nKey improvements:\n- Added type-specific matching strategies:\n  * nil: accepts any panic (most common use case)\n  * error: uses errors.Is for chain\n[…]\ne whilst preserving their intent.\n\nTesting:\n- Added comprehensive table-driven tests using TestCase pattern\n- All branches and type paths fully covered\n\nSigned-off-by: Alejandro Mery <amery@apptly.co>",
          "is_bot": false,
          "headline": "refactor(testing): enhance AssertPanic with type-aware matching",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-09-07T19:06:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9252c7d9bb688237fa5751b195848d473281fdca",
          "body": "chore(deps): update actions/setup-go action to v6",
          "is_bot": false,
          "headline": "Merge pull request #141 (deps)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-09-05T09:54:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd07f472190e2fca41fbdd0eddbf4ecf0ad96856",
          "body": "chore(deps): update actions/setup-node action to v5",
          "is_bot": false,
          "headline": "Merge pull request #142 (deps)",
          "author_name": "Alejandro Mery",
          "author_login": "amery",
          "committed_at": "2025-09-05T09:52:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fbf5461644a39272fca4de31e31694892a34cf2f",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-node action to v5",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-09-04T05:00:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c613ca8cc6d7ad22da2fb801afb5e1c62ee589d7",
          "body": null,
          "is_bot": true,
          "headline": "chore(deps): update actions/setup-go action to v6",
          "author_name": "renovate[bot]",
          "author_login": "renovate[bot]",
          "committed_at": "2025-09-04T05:00:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 15,
      "commits_last_year": 145,
      "latest_release_at": "2026-07-22T22:53:10Z",
      "latest_release_tag": "v0.21.2",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 25,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 37.3
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "darvaza.org/core",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": null,
          "registry_url": "https://pkg.go.dev/darvaza.org/core",
          "is_deprecated": false,
          "latest_version": "v0.21.2",
          "repository_url": null,
          "versions_count": 90,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-21T22:54:47Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 6
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 2,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 60194,
      "source_files_sampled": 41,
      "oversized_source_files": 1,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 4145
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 2,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "golang.org/x/net",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.57.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "golang.org/x/net",
            "direct": true,
            "version": "v0.57.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 2,
        "direct_count": 1,
        "indirect_count": 1
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 161,
        "open_issues": 1,
        "closed_ratio": 0.5,
        "closed_issues": 1,
        "closed_unmerged_prs": 8
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "amery",
          "commits": 424,
          "avatar_url": "https://avatars.githubusercontent.com/u/131371?v=4"
        },
        {
          "type": "User",
          "login": "karasz",
          "commits": 70,
          "avatar_url": "https://avatars.githubusercontent.com/u/74192?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.858
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build.yml",
        "claude-code-review.yml",
        "claude.yml",
        "codecov.yml",
        "platforms.yml",
        "renovate.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 3,
            "reason": "Found 2/6 approved changesets -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 6 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 9,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "d4e45a79c34a35f6513ef92d58bb45f9fc3f21a6",
        "ran_at": "2026-07-28T06:43:21Z",
        "aggregate_score": 7.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-27T04:36:30Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-23T00:47:08Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 88,
          "created_at": "2024-11-25T08:53:59Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/darvaza-proxy/core",
    "host": "github.com",
    "name": "core",
    "owner": "darvaza-proxy"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 67,
      "inputs": {
        "security": 78,
        "vitality": 89,
        "community": 24,
        "governance": 57,
        "engineering": 84
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 89,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 81,
            "inputs": {
              "commits_last_year": 145,
              "human_commit_share": 0.91,
              "days_since_last_push": 5,
              "active_weeks_last_year": 25
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "25/52 weeks with commits",
                "points": 17.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 25
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "145 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 145
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 15,
              "latest_release_tag": "v0.21.2",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 37.3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "15 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~37.3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 37.3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 5,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 5 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 24,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 2,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "2 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 57,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.858
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 86% of commits",
                "points": 3.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 86
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "merged_prs": 161,
              "open_issues": 1,
              "closed_issues": 1,
              "issue_closed_ratio": 0.5,
              "closed_unmerged_prs": 8
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "50% of issues closed",
                "points": 23.4,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 50
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "161/169 decided PRs merged",
                "points": 36.4,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 161,
                      "decided": 169
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 2/6 approved changesets -- score normalized to 3",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "followers": 5,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "darvaza-proxy",
              "public_repos": 17,
              "account_age_days": 1783
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "5 followers of darvaza-proxy",
                "points": 5.6,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 5,
                      "login": "darvaza-proxy"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "17 public repos, account ~4 yr old",
                "points": 18.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 17
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 4
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "darvaza.org/core"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 6
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 6 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "90 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 90
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 84,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "go",
                "darvaza",
                "golang"
              ],
              "has_wiki": true,
              "homepage": "https://darvaza.org/core",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://darvaza.org/core",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "3 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 78,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 7.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "8 out of 8 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 2/6 approved changesets -- score normalized to 3",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 2 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 2
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 2,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 2,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 85,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 4145
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "91 of 91 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 91,
                      "sampled": 91
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0.09
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "9 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 9,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 60194,
              "source_files_sampled": 41,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/41 source files over 60KB",
                "points": 53.7,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 41,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T06:43:38.559924Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/darvaza-proxy/core.svg",
  "full_name": "darvaza-proxy/core",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаGo.