Публічний реєстрДобрий
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-31 10:42 UTC
fastify / fastify-static
Plugin for serving static files as fast as possible
fastify/fastify-static має індекс здоров’я 83 зі 100, що відповідає смузі «Добрий». Найвищий показник — Security (87/100), найнижчий — AI Readiness (46/100). Останнє оновлення було 8 днів тому. Більшість нещодавньої роботи виконують 3 учасники.
83
загалом / 100Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
83
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Власність
FastifyОрганізація
1 273 підписники139 публічних репозиторіївз січ. 2017 р.
За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.
Пакетні екосистеми
| Реєстр | Пакет | Версія | Завантажень / міс | Версії | Остання публікація | Теги |
|---|---|---|---|---|---|---|
| npm | @fastify/static | 10.1.2 | 16 638 679 | 50 | 9 днів тому | fastifystatic |
Метрики за категоріями
Життєздатність
Чи живий проєкт — чи пишеться код і чи виходять релізи?
85
Активність розробки
75Добрий
Як обчислюється оцінка
| 28.8/36 | Свіжість push — останній push 8 дн. тому |
| 20.1/36 | Ритм комітів — 29/52 тижнів із комітами |
| 15.9/18 | Обсяг комітів — 58 комітів за останній рік |
| 10/10 | OpenSSF Scorecard: Maintained — 24 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
Використані вхідні дані
| commits_last_year | 58 |
| human_commit_share | 0,87 |
| days_since_last_push | 8 |
| active_weeks_last_year | 29 |
Дисципліна релізів
100Відмінний
Як обчислюється оцінка
| 27/27 | Випускає релізи — опубліковано 93 релізів |
| 36/36 | Свіжість релізів — останній реліз 9 дн. тому |
| 27/27 | Ритм релізів — реліз кожні ~11,8 дн. |
| 0/10 | OpenSSF Scorecard: Signed-Releases — немає даних |
Використані вхідні дані
| releases_count | 93 |
| latest_release_tag | v10.1.2 |
| releases_from_tags | ні |
| days_since_latest_release | 9 |
| mean_days_between_releases | 11,8 |
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.
Спільнота та впровадження
Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?
84
Популярність і впровадження
68Помірний
Як обчислюється оцінка
| 43.8/60 | Зірки — 500 зірок |
| 17.3/25 | Форки — 120 форків |
| 6.5/15 | Спостерігачі — 16 спостерігачів |
Використані вхідні дані
| forks | 120 |
| stars | 500 |
| watchers | 16 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Здоров'я спільноти
92Відмінний
Як обчислюється оцінка
| 22.5/22.5 | README |
| 22.5/22.5 | Ліцензія — визнана ліцензія (MIT) |
| 18/18 | Настанови CONTRIBUTING |
| 13.5/13.5 | Кодекс поведінки |
| 0/7.2 | Шаблон issue |
| 6.3/6.3 | Шаблон PR |
Використані вхідні дані
| has_readme | так |
| has_license | так |
| has_contributing | так |
| has_issue_template | ні |
| has_code_of_conduct | так |
| has_pull_request_template | так |
Впровадження в екосистемі (завантаження)
100Відмінний
Як обчислюється оцінка
| 80/80 | Щомісячні завантаження — 16 638 679 завантажень/місяць у npm |
| 0/20 | Залежні пакети в реєстрі — ця екосистема цього не повідомляє |
Використані вхідні дані
| packages | @fastify/static |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 16 638 679 |
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.
Сталість та врядування
Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?
83
Як обчислюється оцінка
| 36/54 | Бас-фактор — на 3 контриб’ютор(ів) припадає половина всіх комітів |
| 16.3/22.5 | Розподіл комітів — головний контриб’ютор — автор 28% комітів |
| 13.5/13.5 | Широта контриб’юторів — 82 контриб’юторів |
| 10/10 | OpenSSF Scorecard: Contributors — project has 21 contributing companies or organizations |
Використані вхідні дані
| bus_factor | 3 |
| contributors_sampled | 82 |
| top_contributor_share | 0,275 |
Реактивність на issue та PR
83Добрий
Як обчислюється оцінка
| 45.3/46.8 | Вирішення issue — закрито 97% issue |
| 30.4/38.3 | Прийняття PR — злито 351/441 вирішених PR |
| 7.5/15 | OpenSSF Scorecard: Code-Review — Found 15/27 approved changesets -- score normalized to 5 |
Використані вхідні дані
| merged_prs | 351 |
| open_issues | 5 |
| closed_issues | 152 |
| issue_closed_ratio | 0,968 |
| closed_unmerged_prs | 90 |
Власність та опіка
77Добрий
Як обчислюється оцінка
| 30/30 | Підтримка власника — у власності організації |
| 0/20 | Верифікований домен |
| 22.3/25 | Охоплення власника — 1 273 підписників у fastify |
| 25/25 | Послужний список — 139 публічних репозиторіїв, вік облікового запису ~9 р. |
Використані вхідні дані
| followers | 1 273 |
| owner_type | Organization |
| is_verified | — |
| owner_login | fastify |
| public_repos | 139 |
| account_age_days | 3 493 |
Супровід пакетів
100Відмінний
Як обчислюється оцінка
| 25/25 | Опубліковано й доступно — 1 пакет(ів) у npm |
| 35/35 | Свіжість публікацій — остання публікація 9 дн. тому |
| 20/20 | Історія версій — 50 опублікованих версій |
| 20/20 | Не застарілий — активний, не deprecated і не yanked |
Використані вхідні дані
| packages | @fastify/static |
| ecosystems | npm |
| any_deprecated | ні |
| min_days_since_publish | 9 |
Інженерна якість
Чи наявні базові інженерні практики та документація?
75
Інженерні практики
82Добрий
Як обчислюється оцінка
| 24/24 | Процеси CI — 2 процес(ів) CI |
| 24/24 | Наявні тести |
| 16/16 | Конфігурація лінтера — eslint.config.js |
| 0/9.6 | Pre-commit-хуки |
| 0/6.4 | .editorconfig |
| 18/20 | OpenSSF Scorecard: CI-Tests — 18 out of 19 merged PRs checked by a CI test -- score normalized to 9 |
Використані вхідні дані
| has_ci | так |
| has_tests | так |
| has_editorconfig | ні |
| has_linter_config | так |
| has_precommit_config | ні |
Документація
65Помірний
Як обчислюється оцінка
| 30/30 | README |
| 0/25 | Каталог документації |
| 15/15 | Сайт документації / домашня сторінка — https://npmjs.com/package/@fastify/static |
| 10/10 | Опис репозиторію |
| 10/10 | Теми — 4 тем |
| 0/10 | Wiki |
Використані вхідні дані
| topics | fastify, fastify-plugin, file-server, static |
| has_wiki | ні |
| homepage | https://npmjs.com/package/@fastify/static |
| has_readme | так |
| has_docs_dir | ні |
| has_description | так |
Безпека
Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?
87
Стан безпеки
84Добрий
Як обчислюється оцінка
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — немає даних |
| 2.2/2.5 | CI-Tests — 18 out of 19 merged PRs checked by a CI test -- score normalized to 9 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 3.8/7.5 | Code-Review — Found 15/27 approved changesets -- score normalized to 5 |
| 2.5/2.5 | Contributors — project has 21 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Ліцензія — license file detected |
| 7.5/7.5 | Maintained — 24 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — немає даних |
| 5/5 | Pinned-Dependencies — all dependencies are pinned |
| 3/5 | SAST — SAST tool is not run on all commits -- score normalized to 6 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — немає даних |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Використані вхідні дані
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 8,4 |
Виключено з оцінювання (немає даних або не застосовно): branch_protection, packaging, signed_releases. Залишкові ваги перенормовано.
Сповіщення про залежності
100Відмінний
Як обчислюється оцінка
| 35/35 | Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень |
| 25/25 | Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень |
| 0/40 | Немає задавнених сповіщень — жодне сповіщення не має дати публікації |
Використані вхідні дані
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 24 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей npm:@fastify/static@10.1.2 — тим, що тягне за собою встановлення опублікованого пакета, — 24 пакетів. Досяжність не аналізується.
Готовність до ШІ
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
46
Контекст і настанови для агентів
40У зоні ризику
Як обчислюється оцінка
| 0/45 | Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора |
| 0/15 | Машиночитана документація (llms.txt) |
| 40/40 | Читабельна історія комітів — намір зазначено у 68 з 87 людських комітів (структурований заголовок або пояснювальний текст) |
Використані вхідні дані
| has_llms_txt | ні |
| legible_history_share | 0,782 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Як обчислюється оцінка
| 0/18 | Розгортання однією командою |
| 22/22 | Автоматизовані тести |
| 11/11 | Конфігурація лінтера / форматера — eslint.config.js |
| 0/11 | Статична перевірка типів |
| 0/10 | Відтворюване середовище |
| 0/10 | Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом |
| 8/8 | Автоматизоване супроводження — 13 з останніх 100 комітів — автоматичні оновлення залежностей |
| 10/10 | OpenSSF Scorecard: Pinned-Dependencies — all dependencies are pinned |
Використані вхідні дані
| has_nix | ні |
| has_tests | так |
| lockfiles | — |
| has_dockerfile | ні |
| typed_language | ні |
| bootstrap_files | — |
| has_devcontainer | ні |
| has_linter_config | так |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0,13 |
Читабельність коду для моделей
51Помірний
Як обчислюється оцінка
| 0/45 | Типізований код — JavaScript без конфігурації перевірки типів |
| 51.3/55 | Керовані розміри файлів — 1/15 файлів вихідного коду понад 60 КБ |
Використані вхідні дані
| primary_language | JavaScript |
| largest_source_bytes | 143 088 |
| source_files_sampled | 15 |
| oversized_source_files | 1 |
Машиночитні інтерфейси
40У зоні ризику
Як обчислюється оцінка
| 0/40 | Схема API (OpenAPI/GraphQL/proto) |
| 0/20 | Сервер MCP |
| 40/40 | Придатні до запуску приклади — example |
Використані вхідні дані
| example_dirs | example |
| has_mcp_signal | ні |
| api_schema_files | — |
Ключові факти
500зірок GitHub
82контриб'юторів
58комітів за останні 12 місяців
8днів від останнього пушу
93релізів
3бас-фактор
5відкритих issue
npmпакетних екосистем
Попередження щодо збору даних
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Докладніше
Історія зірок і форків 0 ★ / 120 ⇿
0Зірки
120Форки
87Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 9Мінорні 41Патчі 37
Кожна точка охоплює 9 днів.
OpenSSF Scorecard 8.4 / 10
8.4сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).
| 10 | Binary-Artifacts | no binaries found in the repo |
| н/д | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 9 | CI-Tests | 18 out of 19 merged PRs checked by a CI test -- score normalized to 9 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 5 | Code-Review | Found 15/27 approved changesets -- score normalized to 5 |
| 10 | Contributors | project has 21 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 24 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 |
| н/д | Packaging | packaging workflow not detected |
| 10 | Pinned-Dependencies | all dependencies are pinned |
| 6 | SAST | SAST tool is not run on all commits -- score normalized to 6 |
| 10 | Security-Policy | security policy file detected |
| н/д | Signed-Releases | no releases found |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Прямі залежності 7
| Реєстр | Пакет | Обмеження версії | Маніфест |
|---|---|---|---|
| npm | @fastify/accept-negotiator | ^2.0.0 | package.json |
| npm | @fastify/error | ^4.0.0 | package.json |
| npm | @fastify/send | ^4.0.0 | package.json |
| npm | content-disposition | ^2.0.1 | package.json |
| npm | fastify-plugin | ^6.0.0 | package.json |
| npm | fastq | ^1.17.1 | package.json |
| npm | glob | ^13.0.0 | package.json |
Усі залежності 19
Повний розв'язаний набір залежностей із графа залежностей GitHub: 7 прямих і 12 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
| Реєстр | Пакет | Версія | Зв'язок |
|---|---|---|---|
| npm | @fastify/accept-negotiator | ^2.0.0 | пряма |
| npm | @fastify/error | ^4.0.0 | пряма |
| npm | @fastify/send | ^4.0.0 | пряма |
| npm | content-disposition | ^2.0.1 | пряма |
| npm | fastify-plugin | ^6.0.0 | пряма |
| npm | fastq | ^1.17.1 | пряма |
| npm | glob | ^13.0.0 | пряма |
| npm | @fastify/compress | ^9.0.0 | непряма |
| npm | @types/node | ^26.0.0 | непряма |
| npm | autocannon | ^8.0.0 | непряма |
| npm | borp | ^1.0.0 | непряма |
| npm | c8 | ^12.0.0 | непряма |
| npm | concat-stream | ^2.0.0 | непряма |
| npm | eslint | ^9.17.0 | непряма |
| npm | fastify | ^5.1.0 | непряма |
| npm | neostandard | ^0.12.0 | непряма |
| npm | pino | ^10.0.0 | непряма |
| npm | proxyquire | ^2.1.3 | непряма |
| npm | tstyche | ^7.0.0 | непряма |
Сповіщення про залежності 0
Встановлення npm:@fastify/static@10.1.2 тягне 24 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.
Жодне відоме сповіщення не стосується оцінених залежностей.
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"fastify",
"fastify-plugin",
"file-server",
"static"
],
"is_fork": false,
"size_kb": 731,
"has_wiki": false,
"homepage": "https://npmjs.com/package/@fastify/static",
"languages": {
"CSS": 190,
"HTML": 1097,
"JavaScript": 206436,
"TypeScript": 6508
},
"pushed_at": "2026-07-22T12:45:08Z",
"created_at": "2017-08-17T08:43:43Z",
"owner_type": "Organization",
"updated_at": "2026-07-23T12:25:32Z",
"description": "Plugin for serving static files as fast as possible",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript"
]
},
"owner": {
"blog": "https://fastify.dev",
"name": "Fastify",
"type": "Organization",
"login": "fastify",
"company": null,
"location": "United States of America",
"followers": 1273,
"avatar_url": "https://avatars.githubusercontent.com/u/24939410?v=4",
"created_at": "2017-01-05T14:50:57Z",
"is_verified": null,
"public_repos": 139,
"account_age_days": 3493
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v10.1.2",
"kind": "patch",
"published_at": "2026-07-22T09:44:48Z"
},
{
"tag": "v10.1.1",
"kind": "patch",
"published_at": "2026-07-22T07:54:45Z"
},
{
"tag": "v10.1.0",
"kind": "minor",
"published_at": "2026-07-11T13:51:14Z"
},
{
"tag": "v10.0.0",
"kind": "major",
"published_at": "2026-07-11T10:44:00Z"
},
{
"tag": "v9.3.0",
"kind": "minor",
"published_at": "2026-07-08T16:09:16Z"
},
{
"tag": "v9.2.0",
"kind": "minor",
"published_at": "2026-07-08T15:39:18Z"
},
{
"tag": "v9.1.3",
"kind": "patch",
"published_at": "2026-04-21T07:42:55Z"
},
{
"tag": "v9.1.2",
"kind": "patch",
"published_at": "2026-04-20T13:34:07Z"
},
{
"tag": "v9.1.1",
"kind": "patch",
"published_at": "2026-04-16T04:07:55Z"
},
{
"tag": "v9.1.0",
"kind": "minor",
"published_at": "2026-04-07T07:27:16Z"
},
{
"tag": "v9.0.0",
"kind": "major",
"published_at": "2025-12-25T11:51:54Z"
},
{
"tag": "v8.3.0",
"kind": "minor",
"published_at": "2025-10-17T16:23:19Z"
},
{
"tag": "v8.2.0",
"kind": "minor",
"published_at": "2025-10-17T16:21:29Z"
},
{
"tag": "v8.1.1",
"kind": "patch",
"published_at": "2025-02-17T08:10:37Z"
},
{
"tag": "v8.1.0",
"kind": "minor",
"published_at": "2025-02-02T17:58:28Z"
},
{
"tag": "v8.0.4",
"kind": "patch",
"published_at": "2025-01-11T11:12:29Z"
},
{
"tag": "v8.0.3",
"kind": "patch",
"published_at": "2024-11-22T12:16:42Z"
},
{
"tag": "v8.0.2",
"kind": "patch",
"published_at": "2024-10-17T16:16:07Z"
},
{
"tag": "v8.0.1",
"kind": "patch",
"published_at": "2024-09-21T08:53:51Z"
},
{
"tag": "v8.0.0",
"kind": "major",
"published_at": "2024-09-03T17:12:48Z"
},
{
"tag": "v7.0.4",
"kind": "patch",
"published_at": "2024-05-07T14:59:56Z"
},
{
"tag": "v7.0.3",
"kind": "patch",
"published_at": "2024-04-04T02:19:44Z"
},
{
"tag": "v7.0.2",
"kind": "patch",
"published_at": "2024-03-29T12:49:43Z"
},
{
"tag": "v7.0.1",
"kind": "patch",
"published_at": "2024-02-07T18:59:37Z"
},
{
"tag": "v7.0.0",
"kind": "major",
"published_at": "2024-02-01T16:10:53Z"
},
{
"tag": "v6.12.0",
"kind": "minor",
"published_at": "2023-10-29T14:33:33Z"
},
{
"tag": "v6.11.2",
"kind": "patch",
"published_at": "2023-09-17T08:31:41Z"
},
{
"tag": "v6.11.1",
"kind": "patch",
"published_at": "2023-09-14T05:56:22Z"
},
{
"tag": "v6.11.0",
"kind": "minor",
"published_at": "2023-09-01T20:01:20Z"
},
{
"tag": "v6.10.2",
"kind": "patch",
"published_at": "2023-05-25T16:35:31Z"
},
{
"tag": "v6.10.1",
"kind": "patch",
"published_at": "2023-04-13T17:15:57Z"
},
{
"tag": "v6.10.0",
"kind": "minor",
"published_at": "2023-04-02T09:47:01Z"
},
{
"tag": "v6.9.0",
"kind": "minor",
"published_at": "2023-02-10T15:41:12Z"
},
{
"tag": "v6.8.0",
"kind": "minor",
"published_at": "2023-01-30T13:52:56Z"
},
{
"tag": "v6.7.0",
"kind": "minor",
"published_at": "2023-01-26T10:00:53Z"
},
{
"tag": "v6.6.1",
"kind": "patch",
"published_at": "2023-01-11T10:49:28Z"
},
{
"tag": "v6.6.0",
"kind": "minor",
"published_at": "2022-12-04T23:31:38Z"
},
{
"tag": "v6.5.1",
"kind": "patch",
"published_at": "2022-11-22T07:20:28Z"
},
{
"tag": "v6.5.0",
"kind": "minor",
"published_at": "2022-07-30T11:24:26Z"
},
{
"tag": "v6.4.1",
"kind": "patch",
"published_at": "2022-07-23T12:10:25Z"
},
{
"tag": "v6.4.0",
"kind": "minor",
"published_at": "2022-05-23T15:33:19Z"
},
{
"tag": "v6.3.0",
"kind": "minor",
"published_at": "2022-05-19T19:01:12Z"
},
{
"tag": "v6.2.0",
"kind": "minor",
"published_at": "2022-05-18T10:16:50Z"
},
{
"tag": "v6.1.0",
"kind": "minor",
"published_at": "2022-05-15T12:53:10Z"
},
{
"tag": "v6.0.0",
"kind": "major",
"published_at": "2022-05-06T11:31:48Z"
},
{
"tag": "v5.0.2",
"kind": "patch",
"published_at": "2022-05-04T09:01:33Z"
},
{
"tag": "v5.0.1",
"kind": "patch",
"published_at": "2022-05-01T18:06:23Z"
},
{
"tag": "v5.0.0",
"kind": "major",
"published_at": "2022-04-27T15:34:04Z"
},
{
"tag": "v4.6.1",
"kind": "patch",
"published_at": "2022-03-18T08:47:40Z"
},
{
"tag": "v4.6.0",
"kind": "minor",
"published_at": "2022-03-17T09:35:39Z"
},
{
"tag": "v4.5.0",
"kind": "minor",
"published_at": "2021-11-03T14:40:47Z"
},
{
"tag": "v4.4.2",
"kind": "patch",
"published_at": "2021-10-12T18:42:54Z"
},
{
"tag": "v4.4.1",
"kind": "patch",
"published_at": "2021-10-11T12:51:41Z"
},
{
"tag": "v4.4.0",
"kind": "minor",
"published_at": "2021-10-07T10:24:18Z"
},
{
"tag": "v4.3.0",
"kind": "minor",
"published_at": "2021-10-06T11:01:16Z"
},
{
"tag": "v4.2.4",
"kind": "patch",
"published_at": "2021-10-05T17:00:56Z"
},
{
"tag": "v4.2.3",
"kind": "patch",
"published_at": "2021-08-05T08:44:05Z"
},
{
"tag": "v4.2.2",
"kind": "patch",
"published_at": "2021-05-21T12:48:43Z"
},
{
"tag": "v4.2.1",
"kind": "patch",
"published_at": "2021-05-19T07:54:28Z"
},
{
"tag": "v4.2.0",
"kind": "minor",
"published_at": "2021-05-17T07:53:28Z"
},
{
"tag": "v4.1.0",
"kind": "minor",
"published_at": "2021-05-07T16:32:05Z"
},
{
"tag": "v4.0.1",
"kind": "patch",
"published_at": "2021-02-22T11:55:02Z"
},
{
"tag": "v4.0.0",
"kind": "major",
"published_at": "2021-02-18T09:56:06Z"
},
{
"tag": "v3.4.0",
"kind": "minor",
"published_at": "2021-01-14T11:51:30Z"
},
{
"tag": "v3.3.1",
"kind": "patch",
"published_at": "2021-01-05T16:35:40Z"
},
{
"tag": "v3.3.0",
"kind": "minor",
"published_at": "2020-10-20T08:32:37Z"
},
{
"tag": "v3.2.1",
"kind": "patch",
"published_at": "2020-10-04T12:44:59Z"
},
{
"tag": "3.2.0",
"kind": "minor",
"published_at": "2020-07-20T08:45:53Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2020-07-01T16:44:31Z"
},
{
"tag": "v3.0.1",
"kind": "patch",
"published_at": "2020-06-12T22:59:35Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2020-05-04T10:22:29Z"
},
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2020-04-20T21:07:36Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2020-01-26T18:20:13Z"
},
{
"tag": "v2.5.1",
"kind": "patch",
"published_at": "2019-11-29T07:52:25Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2019-06-17T19:09:11Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2019-03-27T14:46:42Z"
},
{
"tag": "v2.3.4",
"kind": "patch",
"published_at": "2019-02-25T08:58:37Z"
},
{
"tag": "v2.3.3",
"kind": "patch",
"published_at": "2019-02-22T07:20:42Z"
},
{
"tag": "v2.3.2",
"kind": "patch",
"published_at": "2019-02-14T16:44:50Z"
},
{
"tag": "v2.3.1",
"kind": "patch",
"published_at": "2019-02-12T23:23:24Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2019-02-10T18:57:59Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2019-02-05T22:09:05Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2019-01-05T16:56:07Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2019-01-05T16:40:57Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2018-12-05T00:24:30Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2018-12-04T09:54:34Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2018-08-16T21:02:47Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2018-08-13T17:55:30Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2018-05-21T11:51:30Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2018-05-09T23:16:42Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2018-04-10T17:02:52Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2018-01-08T15:15:18Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2017-12-21T09:37:45Z"
}
],
"recent_commits": [
{
"oid": "94d75c0e5b18310a4c34f9b19e6b5f00fd781c89",
"body": "Bumps [c8](https://github.com/bcoe/c8) from 11.0.0 to 12.0.0.\n- [Release notes](https://github.com/bcoe/c8/releases)\n- [Changelog](https://github.com/bcoe/c8/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/bcoe/c8/compare/v11.0.0...v12.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: c8\n d\n[…]\nrect:development\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump c8 from 11.0.0 to 12.0.0 (#602)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-22T12:45:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7a9d1c638dfad3f43973a90a3394e0207ee2ad20",
"body": "Signed-off-by: Matteo Collina <hello@matteocollina.com>",
"is_bot": false,
"headline": "Bumped v10.1.2",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-07-22T09:43:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "878c72e920fabacf7e37739bf78057044717bf63",
"body": null,
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-07-22T09:43:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aee1c2c2c02d7f09fb72c3f29ce1c8aa39abe07f",
"body": null,
"is_bot": false,
"headline": "ci: pin actions to commit-hash (#601)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2026-07-22T08:10:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "373305923c04123ccb120bc540b5fe18417b8c9d",
"body": "Signed-off-by: Matteo Collina <hello@matteocollina.com>",
"is_bot": false,
"headline": "Bumped 10.1.1",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-07-22T07:53:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db4276f846ba56b21f93768cd6636ee5e2fc58b1",
"body": "Validate decoded raw URL paths before route prefix stripping can hide traversal segments, and reject non-leading parent-directory segments before delegating to @fastify/send.\n\nAdd regression coverage for raw and encoded dot-dot segments, route-param consumed segments, redirects, and direct sendFile usage.",
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-07-22T07:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c68224e3067e18ee4c676cc9db66aae6b30ffb02",
"body": "Signed-off-by: Frazer Smith <frazer.dev@icloud.com>",
"is_bot": false,
"headline": "docs(readme): fix typos (#600)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2026-07-12T11:18:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36c939dd75453d3cc9a134d8b7868d1ef6e01c67",
"body": null,
"is_bot": false,
"headline": "Bumped v10.1.0",
"author_name": "KaKa",
"author_login": "climba03003",
"committed_at": "2026-07-11T13:50:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c1121a7d549c22ff8616d001d5c7fbbbffd7eb5",
"body": "…` (#599)\n\n* feat: use @fastify/error\n\n* feat: add option `suppressWarning` to disable warning\n\n* fixup\n\n* fix: use new keyword",
"is_bot": false,
"headline": "feat: use `@fastify/error` for errors and add option `suppressWarning…",
"author_name": "KaKa",
"author_login": "climba03003",
"committed_at": "2026-07-11T13:49:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c57d8bc222ac8adec9aab4bc37643d0f29239ea8",
"body": null,
"is_bot": false,
"headline": "fix: set Vary: Accept-Encoding for preCompressed responses (#586)",
"author_name": "Shaurya Singh",
"author_login": "LeSingh1",
"committed_at": "2026-07-11T13:49:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "babf6dfc681bedc5591f04b2b06227c9ea1d789d",
"body": null,
"is_bot": false,
"headline": "Bumped v10.0.0",
"author_name": "KaKa",
"author_login": "climba03003",
"committed_at": "2026-07-11T10:38:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08ed4617a3a5a5febd156d64c31251d527dfa272",
"body": null,
"is_bot": false,
"headline": "fix!: allow setHeaders to override send headers (#598)",
"author_name": "KaKa",
"author_login": "climba03003",
"committed_at": "2026-07-11T10:37:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99f0193a67cfb07736689e8a1afcca3627fdd2ee",
"body": "* fix: ignore unsupported deflate for precompressed assets\n\n* fix: support deflate precompressed assets\n\n---------\n\nCo-authored-by: jibin7jose <jibinjose8842@gmail.com>",
"is_bot": false,
"headline": "fix: ignore unsupported deflate for precompressed assets (#596)",
"author_name": "jibin jose",
"author_login": "jibin7jose",
"committed_at": "2026-07-11T08:02:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6e5f4de8ba55adef7dc45d41154deb0ec2c0e1e",
"body": null,
"is_bot": false,
"headline": "chore!: bump content-disposition fom 1.0.1 to 2.0.1 (#597)",
"author_name": "KaKa",
"author_login": "climba03003",
"committed_at": "2026-07-09T20:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad05a2788028f5d218fd3ea78e62d26e40ca45a9",
"body": null,
"is_bot": false,
"headline": "Bumped v9.3.0",
"author_name": "Manuel Spigolon",
"author_login": "Eomm",
"committed_at": "2026-07-08T16:09:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58811db4a50260edeafd0537e61aeaafd156145a",
"body": null,
"is_bot": false,
"headline": "chore: update fastify-plugin dependency to version 6.0.0 (#594)",
"author_name": "Luca Del Puppo",
"author_login": "Puppo",
"committed_at": "2026-07-08T16:07:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a343813ae81c62300d17d19c3c44366e5ab15503",
"body": null,
"is_bot": false,
"headline": "Bumped v9.2.0",
"author_name": "Manuel Spigolon",
"author_login": "Eomm",
"committed_at": "2026-07-08T15:39:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b94c725a866fb64f05ea2bac8f47c1e62edca4e1",
"body": null,
"is_bot": false,
"headline": "docs: clarify precompressed allowedPath behavior (#593)",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-07-07T13:53:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "684a4ea79a61d6ba77c73febe21ac1c5b2d480f7",
"body": "Co-authored-by: Antonio Tripodi <Tony133@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: fix broken links (#591)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2026-07-01T14:30:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26e7042e27a934f9d42023c103e18d35967b579b",
"body": "Bumps the dev-dependencies-typescript group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).\n\n\nUpdates `@types/node` from 25.9.4 to 26.0.0\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.c\n[…]\nemver-major\n dependency-group: dev-dependencies-typescript\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump @types/node in the dev-dependencies-typescript group (#592)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T12:44:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "070912a392b3f9913dc2e1259765ae6ff0d718f3",
"body": "Bumps [@fastify/compress](https://github.com/fastify/fastify-compress) from 8.3.1 to 9.0.0.\n- [Release notes](https://github.com/fastify/fastify-compress/releases)\n- [Commits](https://github.com/fastify/fastify-compress/compare/v8.3.1...v9.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: \"@fastify\n[…]\nrect:development\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: bump @fastify/compress from 8.3.1 to 9.0.0 (#590)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T08:39:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f792ea6b27a4db6cacb4e3ca74d9a36a94ac897",
"body": "Update dependabot setting to reduce unnecessary change and noise.\r\nRef https://github.com/fastify/fastify/pull/6715\r\n\n\nSigned-off-by: KaKa <23028015+climba03003@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: update depedabot setting",
"author_name": "KaKa",
"author_login": "climba03003",
"committed_at": "2026-06-19T08:35:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b6043cb3f1665a3425805aeca80d8490feb6838",
"body": null,
"is_bot": false,
"headline": "fix: propagate return value from fastify.errorHandler (#582)",
"author_name": "Abdulmunim",
"author_login": "abdulmunimjemal",
"committed_at": "2026-05-18T09:37:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "040307a9f4172456b0343a42abbdc2cb0c8d5a79",
"body": null,
"is_bot": false,
"headline": "refactor(types): migrate from tsd to tstyche (#579)",
"author_name": "Antonio Tripodi",
"author_login": "Tony133",
"committed_at": "2026-05-13T12:59:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "899184bf00b0b220a51cc82d361145a08d5ee9ad",
"body": "Signed-off-by: Frazer Smith <frazer.dev@icloud.com>",
"is_bot": false,
"headline": "chore(.gitattributes): ensure non-text files remain untouched (#577)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2026-04-23T16:09:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "880c1a6c9118c7ff7c74a5727e5697237183d5cf",
"body": "Signed-off-by: Matteo Collina <hello@matteocollina.com>",
"is_bot": false,
"headline": "Bumped v9.1.3",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-04-21T07:42:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f92da5bf2366ccd2e0082e77d5222a7cb47d152",
"body": "* fix: support wildcard prefixes with route params\n\n* test: remove internal pathname helper\n\n* perf: precompute wildcard prefix matchers\n\n* perf: avoid slicing urls before prefix matching",
"is_bot": false,
"headline": "fix: support wildcard prefixes with route params (#576)",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-04-21T07:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0a66d5270a1ee1535e0c786d9beac2c7c7619c6",
"body": "Signed-off-by: Matteo Collina <hello@matteocollina.com>",
"is_bot": false,
"headline": "Bumped v9.1.2",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-04-20T13:28:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32af86372ab45d3799408d5b56fc7f7d3003e5de",
"body": null,
"is_bot": false,
"headline": "fix: resolve wildcard paths in encapsulated contexts (#574)",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-04-18T14:06:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48b136f5d8da0efea328f49f6202ab3edabf608b",
"body": null,
"is_bot": false,
"headline": "Bumped v9.1.1",
"author_name": "KaKa",
"author_login": "climba03003",
"committed_at": "2026-04-16T04:06:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc7b7f7e00a5f028599ba17392b831afd0c651aa",
"body": "* fix: normalize wildcard path decoding to preserve encoded separators\n\n* chore: linting\n\n---------\n\nCo-authored-by: Ulises Gascon <ulisesgascongonzalez@gmail.com>\nCo-authored-by: KaKa <kaka@kakang.dev>",
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-04-16T04:04:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9921faa7ffe4931f4bbd2d1a8b6d90e720081856",
"body": null,
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-04-16T03:50:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4183d2d8dd52b11c27f7adc22abb8d2531ad4a02",
"body": null,
"is_bot": false,
"headline": "ci: add lock-threads workflow (#570)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2026-04-08T19:11:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3a8cd6c7a5b0937d7ad939564991c284f09754a",
"body": "Signed-off-by: Matteo Collina <hello@matteocollina.com>",
"is_bot": false,
"headline": "Bumped v9.1.0",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2026-04-07T07:25:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8423c80016917b40a3e42c38fd55070a89d1b9b8",
"body": "…(#566)\n\nBumps [fastify/workflows/.github/workflows/plugins-ci.yml](https://github.com/fastify/workflows) from 5 to 6.\n- [Release notes](https://github.com/fastify/workflows/releases)\n- [Commits](https://github.com/fastify/workflows/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: fast\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump fastify/workflows/.github/workflows/plugins-ci.yml …",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-01T15:43:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "475dce148995ac754a8cb344bad63c8cbd6517d2",
"body": null,
"is_bot": false,
"headline": "chore: upgrade c8 to v11.0.0 and improvements test (#564)",
"author_name": "Antonio Tripodi",
"author_login": "Tony133",
"committed_at": "2026-03-14T17:03:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ff0f39b94da96f42a88ed57c554abc8381806c3",
"body": null,
"is_bot": false,
"headline": "fix: sendFile ignoring option overrides in some cases (#559)",
"author_name": "Bakugo",
"author_login": "bakugo",
"committed_at": "2026-03-09T08:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "663baa7da61ff69115995baf59efba6396d814a8",
"body": null,
"is_bot": false,
"headline": "chore(license): standardise license notice (#560)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2026-03-01T09:02:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51bb66e88667850ff5e8f4e9a27ebbf8c5b7bbad",
"body": null,
"is_bot": false,
"headline": "chore: update syntax typescript (#558)",
"author_name": "Antonio Tripodi",
"author_login": "Tony133",
"committed_at": "2026-02-23T08:35:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74c6c026e4f6ec4c167b2a758fcfb052a19ef31d",
"body": "…tatic.test.js (#557)",
"is_bot": false,
"headline": "chore: bump pino and borp dependencies, delete stale.yml and update s…",
"author_name": "Antonio Tripodi",
"author_login": "Tony133",
"committed_at": "2026-02-21T22:19:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61eb9e214ccd28131d46aac2a94c61b9749b8c9c",
"body": "Bumps [borp](https://github.com/mcollina/borp) from 0.20.2 to 0.21.0.\n- [Release notes](https://github.com/mcollina/borp/releases)\n- [Commits](https://github.com/mcollina/borp/commits)\n\n---\nupdated-dependencies:\n- dependency-name: borp\n dependency-version: 0.21.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump borp from 0.20.2 to 0.21.0 (#543)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-14T07:48:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a19a73a9fb74c1b80f6ba77585d3c27856dfd088",
"body": "Signed-off-by: Luca Raveri <lucaraveri993@gmail.com>",
"is_bot": false,
"headline": "test: move ignoreTrailingSlash under routerOptions (#553)",
"author_name": "Luca Raveri",
"author_login": "lraveri",
"committed_at": "2026-01-05T15:10:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cd57f474755399e0e82b42e031fa73dbfc952fa",
"body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.10.4 to 25.0.3.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-dep\n[…]\nrect:development\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump @types/node from 24.10.4 to 25.0.3 (#552)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-01T12:03:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4eec6717e8781f4dc8f5e776d029843f8b86c834",
"body": "Signed-off-by: Matteo Collina <hello@matteocollina.com>",
"is_bot": false,
"headline": "Bumped v9.0.0",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2025-12-25T11:49:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4080e44b8fd74ba8fb6aaa9a0273d3473da4df6d",
"body": null,
"is_bot": false,
"headline": "Update glob@13 (#550)",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2025-12-25T11:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6716f929ee23eb906a0a34c596facbab81c3dea",
"body": "Bumps [content-disposition](https://github.com/jshttp/content-disposition) from 0.5.4 to 1.0.1.\n- [Release notes](https://github.com/jshttp/content-disposition/releases)\n- [Changelog](https://github.com/jshttp/content-disposition/blob/master/HISTORY.md)\n- [Commits](https://github.com/jshttp/content-\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump content-disposition from 0.5.4 to 1.0.1 (#547)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-12-01T13:57:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6165053e0071ad39f9b342237c4c8ffdde8fc697",
"body": null,
"is_bot": false,
"headline": "Bumped v8.3.0",
"author_name": "Manuel Spigolon",
"author_login": "Eomm",
"committed_at": "2025-10-17T16:23:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2e9f9586de95ccb05658b07df84418443b3ade4",
"body": null,
"is_bot": false,
"headline": "ci(ci): add concurrency config (#541)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-10-17T15:16:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27f2bfe198157c65d4fd8611b720599659c884ed",
"body": "…s with absolute path (#540)\n\n* fix: if serve: false and root is not defined, only allow sending files with absolute path\n\n* fix\n\n* fix\n\nIf serve is set explicitly to false then root is required\nIf root is set, it must be validated",
"is_bot": false,
"headline": "fix: if serve: false and root is not defined, only allow sending file…",
"author_name": "Aras Abbasi",
"author_login": "Uzlopak",
"committed_at": "2025-10-16T18:24:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac71e33e341767d3c91ff07959d19984fe0f3a55",
"body": "* feat: small improvements\n\n* Apply suggestions from code review\n\nCo-authored-by: Aras Abbasi <aras.abbasi@googlemail.com>\nSigned-off-by: Matteo Pietro Dazzi <matteopietro.dazzi@gmail.com>\n\n* fix: remove fallback\n\n* chore: removed if check\n\n* chore: null coaleshing on opts.prefix\n\n* chore: use null \n[…]\neaders\n\n* chore: more null coaleshing\n\n* chore: move let to const\n\n---------\n\nSigned-off-by: Matteo Pietro Dazzi <matteopietro.dazzi@gmail.com>\nCo-authored-by: Aras Abbasi <aras.abbasi@googlemail.com>",
"is_bot": false,
"headline": "refactor: small improvements (#539)",
"author_name": "Matteo Pietro Dazzi",
"author_login": "ilteoood",
"committed_at": "2025-10-16T07:10:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "97c55fbbc9035b507d0d7c916620c1ff791933f7",
"body": "Signed-off-by: Aras Abbasi <aras.abbasi@googlemail.com>",
"is_bot": false,
"headline": "Replace substr with slice for URL manipulation (#538)",
"author_name": "Aras Abbasi",
"author_login": "Uzlopak",
"committed_at": "2025-10-09T12:05:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cec0befd70a47dec744a74fc76c341007fea0bd5",
"body": "* chore(index): add jsdoc comments for static code analysis\n\n* chore(index): add some returns",
"is_bot": false,
"headline": "chore(index): add jsdoc comments for static code analysis (#535)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-09-22T14:34:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cc6ca2940613901b62043ebd0d1ab388ce49d93",
"body": null,
"is_bot": false,
"headline": "build(deps-dev): remove @fastify/pre-commit (#534)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-09-21T08:55:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "141f105d07235a7bf2eb746204895a0d953625df",
"body": null,
"is_bot": false,
"headline": "chore(.npmrc): ignore scripts (#533)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-09-19T07:58:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0e7f1c0d1870d1e58aa6b9a8f73311ec2849949",
"body": "Bumps [tsd](https://github.com/tsdjs/tsd) from 0.32.0 to 0.33.0.\n- [Release notes](https://github.com/tsdjs/tsd/releases)\n- [Commits](https://github.com/tsdjs/tsd/compare/v0.32.0...v0.33.0)\n\n---\nupdated-dependencies:\n- dependency-name: tsd\n dependency-version: 0.33.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump tsd from 0.32.0 to 0.33.0 (#532)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-09-01T20:57:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af1687d7a71bb4f1d89b7902b1c7dc18c087c6e5",
"body": null,
"is_bot": false,
"headline": "refactor: remove usage of deprecated request.routeConfig (#530)",
"author_name": "Sahachai",
"author_login": "inyourtime",
"committed_at": "2025-08-22T16:04:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22bdeb16a4cc18038c6e575b0a3773aaf7184abd",
"body": "Signed-off-by: Frazer Smith <frazer.dev@icloud.com>",
"is_bot": false,
"headline": "docs(readme): correct compatibility table (#531)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-08-21T14:30:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4185a545a290acd6cbce2cadc12030f3b7aca88",
"body": "Signed-off-by: Frazer Smith <frazer.dev@icloud.com>",
"is_bot": false,
"headline": "test(types): add missing anchors (#529)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-08-14T18:36:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99ca884cfc9a189242b07b26c4a27ac50084bc20",
"body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.15.34 to 24.0.8.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-de\n[…]\nrect:development\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump @types/node from 22.15.34 to 24.0.8 (#527)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-07-14T11:26:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7b388e0b7382f9b49fc97b5a9725fd62381e6a0e",
"body": null,
"is_bot": false,
"headline": "chore: remove reference to simple-get (#528)",
"author_name": "Matteo Pietro Dazzi",
"author_login": "ilteoood",
"committed_at": "2025-07-14T11:23:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e76497faf7c9e3045984f3d63f87155972ffa3bf",
"body": null,
"is_bot": false,
"headline": "chore(license): update date ranges; standardise style (#525)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-06-23T11:52:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1202569668a9f1d19c69c43119deceae5cfc602",
"body": "Signed-off-by: Park Jihyun <qwer9w@gmail.com>",
"is_bot": false,
"headline": "docs: fix typo (#523)",
"author_name": "Park Jihyun",
"author_login": "9w",
"committed_at": "2025-06-17T09:26:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2421e1ebe2c073610f82584dd52f3d83df7e4047",
"body": null,
"is_bot": false,
"headline": "docs: use cross-platform compatible info emoji (#522)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-05-21T18:05:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1770476afe72684151250da91df2994951752a29",
"body": "Signed-off-by: Matteo Collina <hello@matteocollina.com>",
"is_bot": false,
"headline": "Bumped v8.2.0",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2025-05-21T07:47:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16e78722678110f22c63721f4d32a0efa378e8bc",
"body": "* Add globIgnore option\n\nSigned-off-by: Matteo Collina <hello@matteocollina.com>\n\n* Update index.js\n\nCo-authored-by: Ivan Tymoshenko <ivan@tymoshenko.me>\nSigned-off-by: Matteo Collina <matteo.collina@gmail.com>\n\n---------\n\nSigned-off-by: Matteo Collina <hello@matteocollina.com>\nSigned-off-by: Matteo Collina <matteo.collina@gmail.com>\nCo-authored-by: Ivan Tymoshenko <ivan@tymoshenko.me>",
"is_bot": false,
"headline": "Add globIgnore option (#521)",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2025-05-21T07:47:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c0c25f6ad93a2b6f203f5bcdadf307b71f14cbf",
"body": "Bumps [tsd](https://github.com/tsdjs/tsd) from 0.31.2 to 0.32.0.\n- [Release notes](https://github.com/tsdjs/tsd/releases)\n- [Commits](https://github.com/tsdjs/tsd/compare/v0.31.2...v0.32.0)\n\n---\nupdated-dependencies:\n- dependency-name: tsd\n dependency-version: 0.32.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump tsd from 0.31.2 to 0.32.0 (#520)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-05-01T12:20:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af9a57b074e903d2cafa72f103efb599d6633b00",
"body": "Bumps [borp](https://github.com/mcollina/borp) from 0.19.0 to 0.20.0.\n- [Release notes](https://github.com/mcollina/borp/releases)\n- [Commits](https://github.com/mcollina/borp/compare/v0.19.0...v0.20.0)\n\n---\nupdated-dependencies:\n- dependency-name: borp\n dependency-version: 0.20.0\n dependency-type\n[…]\nrect:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump borp from 0.19.0 to 0.20.0 (#519)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-05-01T12:19:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ace09bf2d41904040cbfbe484e02304488dcd8a2",
"body": null,
"is_bot": false,
"headline": "ci: restore job level permissions (#518)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-03-30T21:32:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55deb252d6cb222dcf4086e8d4b8e67048626748",
"body": null,
"is_bot": false,
"headline": "ci: set permissions at workflow level (#517)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-03-30T20:54:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05a5738975395bff31de18b8d08f7733d4025358",
"body": null,
"is_bot": false,
"headline": "docs(readme): update plugin version syntax (#516)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-03-28T06:35:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91278e6dfc0033371fafe488b6e18ff8429fdfe7",
"body": "* fix: sending dir list\n\n* dummy commit\n\n* undo dummy commit that was just to trigger ci",
"is_bot": false,
"headline": "Fix dirlist (#511)",
"author_name": "jesse",
"author_login": "jessekrubin",
"committed_at": "2025-03-27T16:11:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72c7a7e82081f9457e801ea44bae910bcf4330fc",
"body": null,
"is_bot": false,
"headline": "docs(readme): fix typo (#515)",
"author_name": "Cody Zuschlag",
"author_login": "codyzu",
"committed_at": "2025-03-09T17:16:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15119d0fa1cf64e1cc672da96612433cc64c98d8",
"body": null,
"is_bot": false,
"headline": "ci(ci): set job permissions (#514)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-03-07T19:10:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac6fadc58fbc37cb2b349566561ea9b4403dc72c",
"body": null,
"is_bot": false,
"headline": "doc: add cache example (#512)",
"author_name": "Cody Zuschlag",
"author_login": "codyzu",
"committed_at": "2025-03-02T18:12:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09ac588a4c659c8950972fa6af4ab41680028473",
"body": "Bumps [@fastify/send](https://github.com/fastify/send) from 3.3.1 to 4.0.0.\n- [Release notes](https://github.com/fastify/send/releases)\n- [Changelog](https://github.com/fastify/send/blob/main/HISTORY.md)\n- [Commits](https://github.com/fastify/send/compare/v3.3.1...v4.0.0)\n\n---\nupdated-dependencies:\n\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump @fastify/send from 3.3.1 to 4.0.0 (#513)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2025-03-01T12:28:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae2af37fcee3ef6c99aa470816576c0b0dc48b1a",
"body": "Signed-off-by: Matteo Collina <hello@matteocollina.com>",
"is_bot": false,
"headline": "Bumped v8.1.1",
"author_name": "Matteo Collina",
"author_login": "mcollina",
"committed_at": "2025-02-17T08:10:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5473a6e879024e3e04e9a1231d40cd54f582897",
"body": "…509)\n\n* Redirect to path with trailing slash even for preCompressed\r\n\r\n* Fixed a bug and added a test",
"is_bot": false,
"headline": "fix: redirect to path with trailing slash even for `preCompressed` (#…",
"author_name": "Genki Takiuchi",
"author_login": "genki",
"committed_at": "2025-02-17T08:08:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "344d6797253d97b877064d9c596c44858169f5e2",
"body": null,
"is_bot": false,
"headline": "chore: rename master to main (#507)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-02-03T11:08:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ce1d1ff14f25d14c569078deae3a2d0b6e7576e",
"body": null,
"is_bot": false,
"headline": "Bumped v8.1.0",
"author_name": "Manuel Spigolon",
"author_login": "Eomm",
"committed_at": "2025-02-02T17:58:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcf294fcbb26f8529ad50a1ae52639047a6bd440",
"body": null,
"is_bot": false,
"headline": "feat: add logLevel option (#502)",
"author_name": "Jacopo Riciputi",
"author_login": "Jacopo47",
"committed_at": "2025-02-02T17:57:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5faab5ecf09cb185ff37ee17e067de0b9e984a1",
"body": null,
"is_bot": false,
"headline": "docs(readme): conciseness improvements (#506)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-01-29T09:44:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69aa8c7f812c739273473a7984af5d4daf8ab999",
"body": null,
"is_bot": false,
"headline": "refactor: throw typeerror if checking type (#505)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-01-28T20:34:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7d3de44ddbd37f1782a6f8a32fe4c99322cdb3c",
"body": null,
"is_bot": false,
"headline": "build(dependabot): reduce npm updates to monthly (#504)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-01-15T15:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1caf8ea5a9e2886f5933c661de4042409273c7d9",
"body": null,
"is_bot": false,
"headline": "8.0.4",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-01-11T11:11:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "055db91144f4549f3d681f2ab439536adc393899",
"body": "Signed-off-by: Frazer Smith <frazer.dev@icloud.com>",
"is_bot": false,
"headline": "perf(index): use optional chaining (#501)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-01-11T11:06:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca555e79108167c74a75bb572e2e02cac76b9ddc",
"body": "Signed-off-by: Frazer Smith <frazer.dev@icloud.com>",
"is_bot": false,
"headline": "refactor(index): throw typeerror if checking type (#499)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-01-11T11:05:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "997a6db7c2a18599b0153dcd5538f94d18a1e145",
"body": null,
"is_bot": false,
"headline": "test: prefix unused params with underscores (#500)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-01-11T11:03:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d95f9bde7961ac524d80e696609ae213f92ef1f",
"body": "Signed-off-by: Frazer Smith <frazer.dev@icloud.com>",
"is_bot": false,
"headline": "docs(readme): spelling and grammar fixes (#498)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-01-11T09:22:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d1dcf871574ef17c7ac9d06fb757bcd2dd3b63f",
"body": "* chore: remove tap\r\n\r\n* chore: content type promises\r\n\r\n* chore: removed simple get\r\n\r\n* chore: listen as promise\r\n\r\n* chore: prefixAvoidTrailingSlash\r\n\r\n* fix: register /static\r\n\r\n* feat: static\r\n\r\n* feat: static static2\r\n\r\n* chore: constraints\r\n\r\n* chore: payload path\r\n\r\n* chore: error handler\r\n\r\n[…]\ntteo Pietro Dazzi <matteopietro.dazzi@gmail.com>\r\n\r\n* chore: c8\r\n\r\n---------\r\n\r\nSigned-off-by: Matteo Pietro Dazzi <matteopietro.dazzi@gmail.com>\r\nCo-authored-by: Dan Castillo <dan.castillo@jasper.ai>",
"is_bot": false,
"headline": "Migration to node test runner (#495)",
"author_name": "Matteo Pietro Dazzi",
"author_login": "ilteoood",
"committed_at": "2025-01-10T18:19:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd2e776636515fa2d77ba3ce3881273b962bb131",
"body": "Signed-off-by: Frazer Smith <frazer.dev@icloud.com>",
"is_bot": false,
"headline": "docs(readme): remove link to old send (#496)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2025-01-04T15:33:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be36233c16f97373c0e99897e4b003105bb7f4db",
"body": null,
"is_bot": false,
"headline": "docs(readme): remove useless brackets",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2024-12-23T10:43:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08b558f8e39e1e2c23719371e944c2126fa4a486",
"body": "Signed-off-by: Frazer Smith <frazer.dev@icloud.com>",
"is_bot": false,
"headline": "chore(package): add contribs and funding (#493)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2024-12-23T10:32:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc194469abd76099e17089879d53c137787c4f88",
"body": null,
"is_bot": false,
"headline": "build(deps-dev): add eslint, peer dep of neostandard (#492)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2024-12-16T19:57:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d58b825e8d17ea75b35300099dd73cf33f9174a6",
"body": "Bumps [neostandard](https://github.com/neostandard/neostandard) from 0.11.9 to 0.12.0.\n- [Release notes](https://github.com/neostandard/neostandard/releases)\n- [Changelog](https://github.com/neostandard/neostandard/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/neostandard/neostandard/compar\n[…]\nrect:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps-dev): bump neostandard from 0.11.9 to 0.12.0 (#491)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2024-12-16T12:55:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0dd4a567d32af07b51544a67165e0b146c4d13ea",
"body": null,
"is_bot": false,
"headline": "types: use `node:` prefix for builtins (#490)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2024-12-15T16:24:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c26457286b68d601e18e8651e768dfa9dce13311",
"body": null,
"is_bot": false,
"headline": "build(deps-dev): finish standard to neostandard migration (#489)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2024-12-13T09:26:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7b4c811d7f97b98357e57aec80de2959227405e",
"body": "* docs(readme): standardize compat table\r\n\r\nSigned-off-by: Frazer Smith <frazer.dev@icloud.com>\r\n\r\n* Update README.md\r\n\r\nSigned-off-by: Frazer Smith <frazer.dev@icloud.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Frazer Smith <frazer.dev@icloud.com>",
"is_bot": false,
"headline": "docs(readme): standardize compat table (#488)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2024-12-12T21:24:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "488baa72adcb77a98e988db3f499053b4c68b996",
"body": null,
"is_bot": false,
"headline": "fix: updated readme (#487)",
"author_name": "Ankush Chudiwal",
"author_login": "Ankush1oo8",
"committed_at": "2024-12-11T15:30:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "852a916d177b74df6424b59177c192429147884f",
"body": null,
"is_bot": false,
"headline": "docs(readme): update ci badge syntax (#486)",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2024-12-05T14:19:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db14955c1a1c1f0b96e3a4650edbfd2d8bc5c920",
"body": null,
"is_bot": false,
"headline": "8.0.3",
"author_name": "Frazer Smith",
"author_login": "Fdawgs",
"committed_at": "2024-11-22T12:16:05Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 93,
"commits_last_year": 58,
"latest_release_at": "2026-07-22T09:44:48Z",
"latest_release_tag": "v10.1.2",
"releases_from_tags": false,
"days_since_last_push": 8,
"active_weeks_last_year": 29,
"days_since_latest_release": 9,
"mean_days_between_releases": 11.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 87,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "@fastify/static",
"exists": true,
"license": "MIT",
"keywords": [
"fastify",
"static"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@fastify/static",
"is_deprecated": false,
"latest_version": "10.1.2",
"repository_url": "https://github.com/fastify/fastify-static",
"versions_count": 50,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 18,
"monthly_downloads": 16638679,
"first_published_at": "2022-04-27T15:33:50.993000Z",
"latest_published_at": "2026-07-22T09:44:04.396000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
}
]
},
"popularity": {
"forks": 120,
"stars": 500,
"watchers": 16,
"fork_history": {
"days": [
{
"date": "2017-09-22",
"count": 1
},
{
"date": "2017-10-02",
"count": 1
},
{
"date": "2017-12-19",
"count": 1
},
{
"date": "2018-01-21",
"count": 1
},
{
"date": "2018-05-03",
"count": 1
},
{
"date": "2019-02-04",
"count": 1
},
{
"date": "2019-02-06",
"count": 1
},
{
"date": "2019-02-11",
"count": 1
},
{
"date": "2019-05-28",
"count": 1
},
{
"date": "2019-09-17",
"count": 1
},
{
"date": "2019-09-18",
"count": 1
},
{
"date": "2019-09-23",
"count": 2
},
{
"date": "2019-11-15",
"count": 1
},
{
"date": "2020-01-30",
"count": 1
},
{
"date": "2020-02-12",
"count": 1
},
{
"date": "2020-03-26",
"count": 1
},
{
"date": "2020-03-31",
"count": 1
},
{
"date": "2020-04-19",
"count": 1
},
{
"date": "2020-04-23",
"count": 1
},
{
"date": "2020-04-24",
"count": 1
},
{
"date": "2020-06-22",
"count": 1
},
{
"date": "2020-06-24",
"count": 1
},
{
"date": "2020-07-19",
"count": 1
},
{
"date": "2020-07-31",
"count": 1
},
{
"date": "2020-09-18",
"count": 1
},
{
"date": "2020-10-15",
"count": 1
},
{
"date": "2020-10-31",
"count": 1
},
{
"date": "2021-01-14",
"count": 1
},
{
"date": "2021-01-23",
"count": 1
},
{
"date": "2021-01-29",
"count": 1
},
{
"date": "2021-01-30",
"count": 2
},
{
"date": "2021-02-05",
"count": 1
},
{
"date": "2021-02-07",
"count": 1
},
{
"date": "2021-04-07",
"count": 1
},
{
"date": "2021-05-06",
"count": 1
},
{
"date": "2021-05-17",
"count": 1
},
{
"date": "2021-05-21",
"count": 1
},
{
"date": "2021-06-09",
"count": 1
},
{
"date": "2021-07-13",
"count": 1
},
{
"date": "2021-07-19",
"count": 1
},
{
"date": "2021-08-04",
"count": 1
},
{
"date": "2021-08-05",
"count": 2
},
{
"date": "2021-09-30",
"count": 1
},
{
"date": "2021-10-02",
"count": 1
},
{
"date": "2021-10-07",
"count": 1
},
{
"date": "2021-11-18",
"count": 1
},
{
"date": "2022-01-08",
"count": 1
},
{
"date": "2022-02-13",
"count": 1
},
{
"date": "2022-02-25",
"count": 1
},
{
"date": "2022-02-28",
"count": 1
},
{
"date": "2022-03-17",
"count": 1
},
{
"date": "2022-03-18",
"count": 1
},
{
"date": "2022-04-25",
"count": 1
},
{
"date": "2022-04-29",
"count": 1
},
{
"date": "2022-05-01",
"count": 1
},
{
"date": "2022-05-22",
"count": 1
},
{
"date": "2022-06-11",
"count": 1
},
{
"date": "2022-08-08",
"count": 1
},
{
"date": "2022-09-27",
"count": 1
},
{
"date": "2022-11-01",
"count": 1
},
{
"date": "2022-11-04",
"count": 1
},
{
"date": "2022-11-16",
"count": 1
},
{
"date": "2022-12-04",
"count": 1
},
{
"date": "2023-01-03",
"count": 1
},
{
"date": "2023-02-09",
"count": 1
},
{
"date": "2023-03-09",
"count": 1
},
{
"date": "2023-03-10",
"count": 1
},
{
"date": "2023-03-16",
"count": 1
},
{
"date": "2023-04-05",
"count": 1
},
{
"date": "2023-07-11",
"count": 1
},
{
"date": "2023-07-16",
"count": 1
},
{
"date": "2023-09-02",
"count": 1
},
{
"date": "2023-09-20",
"count": 1
},
{
"date": "2023-12-12",
"count": 1
},
{
"date": "2024-01-19",
"count": 1
},
{
"date": "2024-01-24",
"count": 1
},
{
"date": "2024-03-12",
"count": 1
},
{
"date": "2024-03-21",
"count": 1
},
{
"date": "2024-03-27",
"count": 1
},
{
"date": "2024-05-02",
"count": 1
},
{
"date": "2024-05-04",
"count": 1
},
{
"date": "2024-07-19",
"count": 1
},
{
"date": "2024-08-16",
"count": 1
},
{
"date": "2024-08-22",
"count": 1
},
{
"date": "2024-08-26",
"count": 1
},
{
"date": "2024-08-30",
"count": 1
},
{
"date": "2024-09-02",
"count": 1
},
{
"date": "2024-09-08",
"count": 1
},
{
"date": "2024-10-11",
"count": 2
},
{
"date": "2024-10-22",
"count": 1
},
{
"date": "2024-12-03",
"count": 1
},
{
"date": "2024-12-10",
"count": 1
},
{
"date": "2025-01-01",
"count": 1
},
{
"date": "2025-01-03",
"count": 1
},
{
"date": "2025-02-14",
"count": 1
},
{
"date": "2025-02-28",
"count": 2
},
{
"date": "2025-06-17",
"count": 1
},
{
"date": "2025-08-21",
"count": 1
},
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2025-11-24",
"count": 1
},
{
"date": "2025-12-10",
"count": 1
},
{
"date": "2025-12-27",
"count": 1
},
{
"date": "2026-01-27",
"count": 1
},
{
"date": "2026-02-03",
"count": 1
},
{
"date": "2026-02-10",
"count": 1
},
{
"date": "2026-02-24",
"count": 1
},
{
"date": "2026-04-07",
"count": 1
},
{
"date": "2026-04-11",
"count": 1
},
{
"date": "2026-04-18",
"count": 1
},
{
"date": "2026-04-20",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-16",
"count": 2
},
{
"date": "2026-07-08",
"count": 2
}
],
"complete": true,
"collected": 120,
"total_forks": 120
},
"star_history": null,
"open_issues_and_prs": 7
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"example"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 143088,
"source_files_sampled": 15,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 24,
"malicious_count": 0,
"assessed_package": "npm:@fastify/static@10.1.2",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@fastify/accept-negotiator",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.0"
},
{
"name": "@fastify/error",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@fastify/send",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "content-disposition",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.1"
},
{
"name": "fastify-plugin",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.0"
},
{
"name": "fastq",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.17.1"
},
{
"name": "glob",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^13.0.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@fastify/accept-negotiator",
"direct": true,
"version": "^2.0.0",
"ecosystem": "npm"
},
{
"name": "@fastify/error",
"direct": true,
"version": "^4.0.0",
"ecosystem": "npm"
},
{
"name": "@fastify/send",
"direct": true,
"version": "^4.0.0",
"ecosystem": "npm"
},
{
"name": "content-disposition",
"direct": true,
"version": "^2.0.1",
"ecosystem": "npm"
},
{
"name": "fastify-plugin",
"direct": true,
"version": "^6.0.0",
"ecosystem": "npm"
},
{
"name": "fastq",
"direct": true,
"version": "^1.17.1",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": true,
"version": "^13.0.0",
"ecosystem": "npm"
},
{
"name": "@fastify/compress",
"direct": false,
"version": "^9.0.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "^26.0.0",
"ecosystem": "npm"
},
{
"name": "autocannon",
"direct": false,
"version": "^8.0.0",
"ecosystem": "npm"
},
{
"name": "borp",
"direct": false,
"version": "^1.0.0",
"ecosystem": "npm"
},
{
"name": "c8",
"direct": false,
"version": "^12.0.0",
"ecosystem": "npm"
},
{
"name": "concat-stream",
"direct": false,
"version": "^2.0.0",
"ecosystem": "npm"
},
{
"name": "eslint",
"direct": false,
"version": "^9.17.0",
"ecosystem": "npm"
},
{
"name": "fastify",
"direct": false,
"version": "^5.1.0",
"ecosystem": "npm"
},
{
"name": "neostandard",
"direct": false,
"version": "^0.12.0",
"ecosystem": "npm"
},
{
"name": "pino",
"direct": false,
"version": "^10.0.0",
"ecosystem": "npm"
},
{
"name": "proxyquire",
"direct": false,
"version": "^2.1.3",
"ecosystem": "npm"
},
{
"name": "tstyche",
"direct": false,
"version": "^7.0.0",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 19,
"direct_count": 7,
"indirect_count": 12
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 351,
"open_issues": 5,
"closed_ratio": 0.968,
"closed_issues": 152,
"closed_unmerged_prs": 90
},
"bus_factor": 3,
"bot_contributors": 4,
"top_contributors": [
{
"type": "User",
"login": "mcollina",
"commits": 121,
"avatar_url": "https://avatars.githubusercontent.com/u/52195?v=4"
},
{
"type": "User",
"login": "Fdawgs",
"commits": 78,
"avatar_url": "https://avatars.githubusercontent.com/u/43814140?v=4"
},
{
"type": "User",
"login": "allevo",
"commits": 49,
"avatar_url": "https://avatars.githubusercontent.com/u/1054125?v=4"
},
{
"type": "User",
"login": "Eomm",
"commits": 22,
"avatar_url": "https://avatars.githubusercontent.com/u/11404065?v=4"
},
{
"type": "User",
"login": "cemremengu",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/1297759?v=4"
},
{
"type": "User",
"login": "gurgunday",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/74139498?v=4"
},
{
"type": "User",
"login": "climba03003",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/23028015?v=4"
},
{
"type": "User",
"login": "Uzlopak",
"commits": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/5059100?v=4"
},
{
"type": "User",
"login": "is2ei",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/3948353?v=4"
},
{
"type": "User",
"login": "gj",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/17556281?v=4"
}
],
"contributors_sampled": 82,
"top_contributor_share": 0.275
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"lock-threads.yml"
],
"has_docs_dir": false,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 9,
"reason": "18 out of 19 merged PRs checked by a CI test -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 5,
"reason": "Found 15/27 approved changesets -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 21 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "24 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 6,
"reason": "SAST tool is not run on all commits -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "94d75c0e5b18310a4c34f9b19e6b5f00fd781c89",
"ran_at": "2026-07-31T10:41:51Z",
"aggregate_score": 8.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-29T12:42:18Z",
"oldest_open_prs": [
{
"number": 565,
"created_at": "2026-03-15T11:25:34Z",
"last_comment_at": "2026-03-15T11:40:23Z",
"last_comment_author": "Fdawgs"
},
{
"number": 571,
"created_at": "2026-04-11T14:44:23Z",
"last_comment_at": "2026-05-09T17:52:30Z",
"last_comment_author": "Fdawgs"
}
],
"last_merged_pr_at": "2026-07-22T12:45:06Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 178,
"created_at": "2021-03-05T02:58:26Z",
"last_comment_at": "2023-04-19T14:01:45Z",
"last_comment_author": "yaneony"
},
{
"number": 221,
"created_at": "2021-07-14T08:54:21Z",
"last_comment_at": "2022-03-29T13:49:15Z",
"last_comment_author": "mcollina"
},
{
"number": 385,
"created_at": "2023-05-24T09:07:23Z",
"last_comment_at": "2023-09-07T19:25:22Z",
"last_comment_author": "Uzlopak"
},
{
"number": 432,
"created_at": "2024-02-02T09:34:55Z",
"last_comment_at": "2024-10-16T07:40:39Z",
"last_comment_author": "climba03003"
},
{
"number": 551,
"created_at": "2025-12-26T18:30:13Z",
"last_comment_at": "2026-02-05T08:22:26Z",
"last_comment_author": "Uzlopak"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/fastify/fastify-static",
"host": "github.com",
"name": "fastify-static",
"owner": "fastify"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"security": 87,
"vitality": 85,
"community": 84,
"governance": 83,
"engineering": 75
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 85,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"commits_last_year": 58,
"human_commit_share": 0.87,
"days_since_last_push": 8,
"active_weeks_last_year": 29
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 8 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "29/52 weeks with commits",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 29
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "58 commits in the last year",
"points": 15.9,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 58
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "24 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 93,
"latest_release_tag": "v10.1.2",
"releases_from_tags": false,
"days_since_latest_release": 9,
"mean_days_between_releases": 11.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "93 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 93
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~11.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 11.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 9,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 9 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 9
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 84,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"forks": 120,
"stars": 500,
"watchers": 16,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "500 stars",
"points": 43.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 500
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "120 forks",
"points": 17.3,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 120
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "16 watchers",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 16
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"packages": [
"@fastify/static"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 16638679
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "16,638,679 downloads/month across npm",
"points": 80,
"status": "met",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 16638679,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 83,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 82,
"top_contributor_share": 0.275
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 28% of commits",
"points": 16.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 28
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "82 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 82
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 21 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"merged_prs": 351,
"open_issues": 5,
"closed_issues": 152,
"issue_closed_ratio": 0.968,
"closed_unmerged_prs": 90
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "97% of issues closed",
"points": 45.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 97
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "351/441 decided PRs merged",
"points": 30.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 351,
"decided": 441
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 15/27 approved changesets -- score normalized to 5",
"points": 7.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"followers": 1273,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "fastify",
"public_repos": 139,
"account_age_days": 3493
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,273 followers of fastify",
"points": 22.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1273,
"login": "fastify"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "139 public repos, account ~9 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 139
}
},
{
"code": "account_age_years",
"params": {
"years": 9
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@fastify/static"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 9
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 9 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 9
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "50 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 50
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 75,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "18 out of 19 merged PRs checked by a CI test -- score normalized to 9",
"points": 18,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"fastify",
"fastify-plugin",
"file-server",
"static"
],
"has_wiki": false,
"homepage": "https://npmjs.com/package/@fastify/static",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://npmjs.com/package/@fastify/static",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "excellent",
"name": "Security",
"value": 87,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 84,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 8.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "18 out of 19 merged PRs checked by a CI test -- score normalized to 9",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 15/27 approved changesets -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 21 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "24 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 6",
"points": 3,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@fastify/static@10.1.2 runtime dependency closure — what installing the published package pulls in — 24 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@fastify/static@10.1.2",
"assessed": 24
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 24,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 24,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 20
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 46,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.782,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "68 of 87 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 68,
"sampled": 87
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.13
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "13 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 13,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 143088,
"source_files_sampled": 15,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/15 source files over 60KB",
"points": 51.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 15,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"example"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "example",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "example"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-31T10:42:15.453934Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/f/fastify/fastify-static.svg",
"full_name": "fastify/fastify-static",
"license_state": "standard",
"license_spdx": "MIT"
}Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.
Як окремий результат виглядає на тлі всього реєстру: сукупна статистика — npm.