Публічний реєстрДобрий
Звіт про здоров'я програмного забезпеченнясхема 0.25.0 · метрики 1.13.0 · 2026-07-21 22:53 UTC
googlefonts / fontations
Reading and writing font files
googlefonts/fontations має індекс здоров’я 75 зі 100, що відповідає смузі «Добрий». Найвищий показник — Sustainability & Governance (80/100), найнижчий — AI Readiness (50/100). Останнє оновлення — сьогодні. Більшість нещодавньої роботи виконують 3 учасники.
75
загалом / 100Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
75
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Власність
Google FontsОрганізація
1 785 підписників547 публічних репозиторіївз січ. 2014 р.
За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.
Пакетні екосистеми
| Реєстр | Пакет | Версія | Завантажень / міс | Версії | Остання публікація | Теги |
|---|---|---|---|---|---|---|
| crates.io | skera | 0.5.0 | 1 495 | 9 | 0 днів тому | text-processing |
| crates.io | skrifa | 0.45.0 | 2 652 452 | 81 | 0 днів тому | parsingtext-processinggraphics |
| crates.io | font-types | 0.12.1 | 2 543 867 | 50 | 17 днів тому | text-processing |
| crates.io | read-fonts | 0.42.0 | 2 789 279 | 96 | 0 днів тому | parsingtext-processinggraphics |
| crates.io | write-fonts | 0.51.0 | 751 014 | 99 | 0 днів тому | parsingtext-processinggraphics |
Метрики за категоріями
Життєздатність
Чи живий проєкт — чи пишеться код і чи виходять релізи?
75
Активність розробки
96Відмінний
Як обчислюється оцінка
| 36/36 | Свіжість push — останній push 0 дн. тому |
| 32.5/36 | Ритм комітів — 47/52 тижнів із комітами |
| 18/18 | Обсяг комітів — 631 комітів за останній рік |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10 |
Використані вхідні дані
| commits_last_year | 631 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 47 |
Дисципліна релізів
44У зоні ризику
Як обчислюється оцінка
| 27/27 | Випускає релізи — опубліковано 1 релізів |
| 0/36 | Свіжість релізів — останній реліз 1 293 дн. тому |
| 12.6/27 | Ритм релізів — ритм невідомий (єдиний реліз) |
| 0/10 | OpenSSF Scorecard: Signed-Releases — немає даних |
Використані вхідні дані
| releases_count | 1 |
| latest_release_tag | v0.0.5 |
| releases_from_tags | ні |
| days_since_latest_release | 1 293 |
| mean_days_between_releases | — |
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.
Спільнота та впровадження
Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?
70
Популярність і впровадження
70Добрий
Як обчислюється оцінка
| 47/60 | Зірки — 794 зірок |
| 15.2/25 | Форки — 67 форків |
| 7.9/15 | Спостерігачі — 27 спостерігачів |
Використані вхідні дані
| forks | 67 |
| stars | 794 |
| watchers | 27 |
| growth_state | organic |
| growth_factor_pct | 100 |
Здоров'я спільноти
50Помірний
Як обчислюється оцінка
| 22.5/22.5 | README |
| 22.5/22.5 | Ліцензія — визнана ліцензія (Apache-2.0) |
| 0/18 | Настанови CONTRIBUTING |
| 0/13.5 | Кодекс поведінки |
| 0/7.2 | Шаблон issue |
| 0/6.3 | Шаблон PR |
Використані вхідні дані
| has_readme | так |
| has_license | так |
| has_contributing | ні |
| has_issue_template | ні |
| has_code_of_conduct | ні |
| has_pull_request_template | ні |
Впровадження в екосистемі (завантаження)
100Відмінний
Як обчислюється оцінка
| 80/80 | Щомісячні завантаження — 8 738 107 завантажень/місяць у crates |
| 0/20 | Залежні пакети в реєстрі — ця екосистема цього не повідомляє |
Використані вхідні дані
| packages | skera, skrifa, font-types, read-fonts, write-fonts |
| dependents | — |
| ecosystems | crates |
| total_downloads | 55 088 194 |
| monthly_downloads | 8 738 107 |
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.
Сталість та врядування
Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?
80
Як обчислюється оцінка
| 36/54 | Бас-фактор — на 3 контриб’ютор(ів) припадає половина всіх комітів |
| 15.7/22.5 | Розподіл комітів — головний контриб’ютор — автор 30% комітів |
| 13.5/13.5 | Широта контриб’юторів — 32 контриб’юторів |
| 10/10 | OpenSSF Scorecard: Contributors — project has 25 contributing companies or organizations |
Використані вхідні дані
| bus_factor | 3 |
| contributors_sampled | 32 |
| top_contributor_share | 0,3 |
Реактивність на issue та PR
72Добрий
Як обчислюється оцінка
| 24.6/46.8 | Вирішення issue — закрито 53% issue |
| 35.9/38.3 | Прийняття PR — злито 1 422/1 513 вирішених PR |
| 12/15 | OpenSSF Scorecard: Code-Review — Found 20/24 approved changesets -- score normalized to 8 |
Використані вхідні дані
| merged_prs | 1 422 |
| open_issues | 199 |
| closed_issues | 221 |
| issue_closed_ratio | 0,526 |
| closed_unmerged_prs | 91 |
Власність та опіка
78Добрий
Як обчислюється оцінка
| 30/30 | Підтримка власника — у власності організації |
| 0/20 | Верифікований домен |
| 23.4/25 | Охоплення власника — 1 785 підписників у googlefonts |
| 25/25 | Послужний список — 547 публічних репозиторіїв, вік облікового запису ~12 р. |
Використані вхідні дані
| followers | 1 785 |
| owner_type | Organization |
| is_verified | — |
| owner_login | googlefonts |
| public_repos | 547 |
| account_age_days | 4 563 |
Супровід пакетів
100Відмінний
Як обчислюється оцінка
| 25/25 | Опубліковано й доступно — 5 пакет(ів) у crates |
| 35/35 | Свіжість публікацій — остання публікація 0 дн. тому |
| 20/20 | Історія версій — 99 опублікованих версій |
| 20/20 | Не застарілий — активний, не deprecated і не yanked |
Використані вхідні дані
| packages | skera, skrifa, font-types, read-fonts, write-fonts |
| ecosystems | crates |
| any_deprecated | ні |
| min_days_since_publish | 0 |
Інженерна якість
Чи наявні базові інженерні практики та документація?
71
Інженерні практики
68Помірний
Як обчислюється оцінка
| 24/24 | Процеси CI — 1 процес(ів) CI |
| 24/24 | Наявні тести |
| 0/16 | Конфігурація лінтера |
| 0/9.6 | Pre-commit-хуки |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 24 out of 24 merged PRs checked by a CI test -- score normalized to 10 |
Використані вхідні дані
| has_ci | так |
| has_tests | так |
| has_editorconfig | ні |
| has_linter_config | ні |
| has_precommit_config | ні |
Документація
75Добрий
Як обчислюється оцінка
| 30/30 | README |
| 25/25 | Каталог документації |
| 0/15 | Сайт документації / домашня сторінка |
| 10/10 | Опис репозиторію |
| 0/10 | Теми |
| 10/10 | Wiki |
Використані вхідні дані
| topics | — |
| has_wiki | так |
| homepage | — |
| has_readme | так |
| has_docs_dir | так |
| has_description | так |
Безпека
Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?
78
Стан безпеки
73Добрий
Як обчислюється оцінка
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — немає даних |
| 2.5/2.5 | CI-Tests — 24 out of 24 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 6/7.5 | Code-Review — Found 20/24 approved changesets -- score normalized to 8 |
| 2.5/2.5 | Contributors — project has 25 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 5/5 | Fuzzing — project is fuzzed |
| 2.5/2.5 | Ліцензія — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — немає даних |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 4.5/5 | SAST — SAST tool is not run on all commits -- score normalized to 9 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — немає даних |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Використані вхідні дані
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 7,3 |
Виключено з оцінювання (немає даних або не застосовно): branch_protection, packaging, signed_releases. Залишкові ваги перенормовано.
Сповіщення про залежності
100Відмінний
Як обчислюється оцінка
| 35/35 | Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень |
| 0/25 | Непрямі залежності без відомих сповіщень — транзитивний набір не відокремлюється від залежностей розробки й тестування в цьому обсязі |
| 0/40 | Немає задавнених сповіщень — жодне сповіщення не має дати публікації |
Використані вхідні дані
| source | osv |
| advisories | 4 |
| affected_packages | 2 |
| assessed_packages | 4 |
| unassessed_packages | 35 |
| affected_by_severity | moderate 2 |
| direct_affected_packages | 0 |
Виключено з оцінювання (немає даних або не застосовно): Непрямі залежності без відомих сповіщень, Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено 4 резолвлених залежностей із OSV. 35 не вдалося оцінити — немає резолвленої версії, непідтримувана екосистема або поза межами звітованого переліку пакетів. Цей репозиторій не публікує пакета, який резолвить індекс, тож натомість оцінено граф залежностей репозиторію. Цей граф змішує закріплені версії для розробки й тестування зі справді постачаними залежностями, тож оцінюються лише задекларовані runtime-залежності; транзитивні знахідки подаються як контекст і в оцінку не входять. Досяжність не аналізується.
Готовність до ШІ
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
50
Контекст і настанови для агентів
31У зоні ризику
Як обчислюється оцінка
| 0/45 | Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора |
| 0/15 | Машиночитана документація (llms.txt) |
| 30.9/40 | Читабельна історія комітів — намір зазначено у 58 з 100 людських комітів (структурований заголовок або пояснювальний текст) |
Використані вхідні дані
| has_llms_txt | ні |
| legible_history_share | 0,58 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Цикл верифікації (збірка / тести / перевірка типів)
46У зоні ризику
Як обчислюється оцінка
| 12.6/18 | Розгортання однією командою — Cargo.toml, fauntlet/Cargo.toml, font-codegen/Cargo.toml (домовленість інструментарію, без раннера задач) |
| 22/22 | Автоматизовані тести |
| 0/11 | Конфігурація лінтера / форматера |
| 11/11 | Статична перевірка типів — Rust (статично типізована) |
| 0/10 | Відтворюване середовище |
| 0/10 | Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом |
| 0/8 | Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Використані вхідні дані
| has_nix | ні |
| has_tests | так |
| lockfiles | — |
| has_dockerfile | ні |
| typed_language | так |
| bootstrap_files | — |
| has_devcontainer | ні |
| has_linter_config | ні |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | Cargo.toml, fauntlet/Cargo.toml, font-codegen/Cargo.toml, font-test-data/Cargo.toml, font-types/Cargo.toml, fuzz/Cargo.toml, incremental-font-transfer/Cargo.toml, otexplorer/Cargo.toml, read-fonts/Cargo.toml, shared-brotli-patch-decoder/Cargo.toml, skera/Cargo.toml, skrifa/Cargo.toml, write-fonts/Cargo.toml |
| dependency_bot_commit_share | 0 |
Читабельність коду для моделей
98Відмінний
Як обчислюється оцінка
| 45/45 | Типізований код — Rust (статично типізована) |
| 53.5/55 | Керовані розміри файлів — 13/485 файлів вихідного коду понад 60 КБ |
Використані вхідні дані
| primary_language | Rust |
| largest_source_bytes | 109 353 |
| source_files_sampled | 485 |
| oversized_source_files | 13 |
Ключові факти
794зірок GitHub
32контриб'юторів
631комітів за останні 12 місяців
0днів від останнього пушу
1релізів
3бас-фактор
199відкритих issue
crates.ioпакетних екосистем
Попередження щодо збору даних
- Could not fetch crates package 'fauntlet' from its registry
- Could not fetch crates package 'otexplorer' from its registry
- Could not fetch crates package 'font-codegen' from its registry
- deps.dev does not index crates:skera@0.5.0; advisories assessed against the repository dependency graph instead
Докладніше
Історія зірок і форків 794 ★ / 67 ⇿
794Зірки
67Форки
1Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 0Патчі 1
Кожна точка охоплює 4 днів.
OpenSSF Scorecard 7.3 / 10
7.3сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).
| 10 | Binary-Artifacts | no binaries found in the repo |
| н/д | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 24 out of 24 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 8 | Code-Review | Found 20/24 approved changesets -- score normalized to 8 |
| 10 | Contributors | project has 25 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 10 | Fuzzing | project is fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10 |
| н/д | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 9 | SAST | SAST tool is not run on all commits -- score normalized to 9 |
| 0 | Security-Policy | security policy file not detected |
| н/д | Signed-Releases | no releases found |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Прямі залежності 60
| Реєстр | Пакет | Обмеження версії | Маніфест |
|---|---|---|---|
| crates.io | skrifa | — | fauntlet/Cargo.toml |
| crates.io | freetype-rs | 0.38.0 | fauntlet/Cargo.toml |
| crates.io | memmap2 | 0.5.10 | fauntlet/Cargo.toml |
| crates.io | rayon | — | fauntlet/Cargo.toml |
| crates.io | clap | 4.4.7 | fauntlet/Cargo.toml |
| crates.io | wild | 2.2.0 | fauntlet/Cargo.toml |
| crates.io | similar | 2.3.0 | fauntlet/Cargo.toml |
| crates.io | font-types | — | font-codegen/Cargo.toml |
| crates.io | rustfmt-wrapper | 0.2 | font-codegen/Cargo.toml |
| crates.io | home | =0.5.11 | font-codegen/Cargo.toml |
| crates.io | regex | 1.5 | font-codegen/Cargo.toml |
| crates.io | miette | 5.0 | font-codegen/Cargo.toml |
| crates.io | syn | 2.0 | font-codegen/Cargo.toml |
| crates.io | proc-macro2 | 1.0 | font-codegen/Cargo.toml |
| crates.io | quote | 1.0 | font-codegen/Cargo.toml |
| crates.io | toml | 0.8.19 | font-codegen/Cargo.toml |
| crates.io | serde | 1.0 | font-codegen/Cargo.toml |
| crates.io | xflags | 0.3.0 | font-codegen/Cargo.toml |
| crates.io | log | 0.4 | font-codegen/Cargo.toml |
| crates.io | rayon | — | font-codegen/Cargo.toml |
| crates.io | indexmap | 2.0 | font-codegen/Cargo.toml |
| crates.io | env_logger | — | font-codegen/Cargo.toml |
| crates.io | font-types | — | font-test-data/Cargo.toml |
| crates.io | bytemuck | — | font-types/Cargo.toml |
| crates.io | serde | 1.0 | font-types/Cargo.toml |
| crates.io | read-fonts | — | incremental-font-transfer/Cargo.toml |
| crates.io | write-fonts | — | incremental-font-transfer/Cargo.toml |
| crates.io | font-types | — | incremental-font-transfer/Cargo.toml |
| crates.io | skrifa | — | incremental-font-transfer/Cargo.toml |
| crates.io | skera | — | incremental-font-transfer/Cargo.toml |
| crates.io | shared-brotli-patch-decoder | — | incremental-font-transfer/Cargo.toml |
| crates.io | woff2-patched | 0.4.0 | incremental-font-transfer/Cargo.toml |
| crates.io | clap | 4.5.4 | incremental-font-transfer/Cargo.toml |
| crates.io | regex | 1.11.1 | incremental-font-transfer/Cargo.toml |
| crates.io | owo-colors | 4 | otexplorer/Cargo.toml |
| crates.io | font-types | — | otexplorer/Cargo.toml |
| crates.io | read-fonts | — | otexplorer/Cargo.toml |
| crates.io | xflags | 0.3.0 | otexplorer/Cargo.toml |
| crates.io | font-types | — | read-fonts/Cargo.toml |
| crates.io | serde | 1.0 | read-fonts/Cargo.toml |
| crates.io | core_maths | — | read-fonts/Cargo.toml |
| crates.io | bytemuck | — | read-fonts/Cargo.toml |
| crates.io | once_cell | 1.21.4 | read-fonts/Cargo.toml |
| crates.io | brotli-decompressor | 5.0.0 | shared-brotli-patch-decoder/Cargo.toml |
| crates.io | cfg-if | 1.0.0 | shared-brotli-patch-decoder/Cargo.toml |
| crates.io | clap | 4.5.4 | skera/Cargo.toml |
| crates.io | hashbrown | 0.17.0 | skera/Cargo.toml |
| crates.io | skrifa | — | skera/Cargo.toml |
| crates.io | thiserror | 2.0 | skera/Cargo.toml |
| crates.io | write-fonts | — | skera/Cargo.toml |
| crates.io | read-fonts | — | skrifa/Cargo.toml |
| crates.io | core_maths | — | skrifa/Cargo.toml |
| crates.io | bytemuck | — | skrifa/Cargo.toml |
| crates.io | font-types | — | write-fonts/Cargo.toml |
| crates.io | read-fonts | — | write-fonts/Cargo.toml |
| crates.io | log | 0.4 | write-fonts/Cargo.toml |
| crates.io | kurbo | — | write-fonts/Cargo.toml |
| crates.io | dot2 | 1.0 | write-fonts/Cargo.toml |
| crates.io | serde | 1.0 | write-fonts/Cargo.toml |
| crates.io | indexmap | 2.0 | write-fonts/Cargo.toml |
Усі залежності 39
Повний розв'язаний набір залежностей із графа залежностей GitHub: 25 прямих і 14 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
| Реєстр | Пакет | Версія | Зв'язок |
|---|---|---|---|
| crates.io | brotli-decompressor | — | пряма |
| crates.io | cfg-if | — | пряма |
| crates.io | clap | — | пряма |
| crates.io | dot2 | — | пряма |
| crates.io | freetype-rs | — | пряма |
| crates.io | hashbrown | — | пряма |
| crates.io | home | 0.5.11 | пряма |
| crates.io | indexmap | — | пряма |
| crates.io | log | — | пряма |
| crates.io | memmap2 | — | пряма |
| crates.io | miette | — | пряма |
| crates.io | once_cell | — | пряма |
| crates.io | owo-colors | — | пряма |
| crates.io | proc-macro2 | — | пряма |
| crates.io | quote | — | пряма |
| crates.io | regex | — | пряма |
| crates.io | rustfmt-wrapper | — | пряма |
| crates.io | serde | — | пряма |
| crates.io | similar | — | пряма |
| crates.io | syn | — | пряма |
| crates.io | thiserror | — | пряма |
| crates.io | toml | — | пряма |
| crates.io | wild | — | пряма |
| crates.io | woff2-patched | — | пряма |
| crates.io | xflags | — | пряма |
| crates.io | bincode | — | непряма |
| crates.io | brotlic | — | непряма |
| crates.io | cc | — | непряма |
| crates.io | diff | — | непряма |
| crates.io | libfuzzer-sys | — | непряма |
| crates.io | nu-ansi-term | — | непряма |
| crates.io | pretty_assertions | — | непряма |
| crates.io | rand | — | непряма |
| crates.io | rstest | — | непряма |
| crates.io | serde_json | — | непряма |
| crates.io | tempfile | — | непряма |
| PyPI | fonttools | 4.52.4 | непряма |
| PyPI | fonttools | 4.53.0 | непряма |
| PyPI | freetype-py | 2.4.0 | непряма |
Сповіщення про залежності 2
Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 4 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 2 мають відомі сповіщення, з них 0 прямі. 35 не вдалося оцінити — немає резолвленої версії, непідтримувана екосистема або поза наведеним переліком пакетів.
| Пакет | Версія | Зв'язок | Критичність | Сповіщень | Виправлено в |
|---|---|---|---|---|---|
| fonttools | 4.52.4 | непряма | помірна | 2 | 4.60.2 |
| fonttools | 4.53.0 | непряма | помірна | 2 | 4.60.2 |
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 43407,
"has_wiki": true,
"homepage": null,
"languages": {
"Roff": 2391,
"Rust": 8847959,
"Shell": 11823,
"Python": 73844
},
"pushed_at": "2026-07-21T19:37:10Z",
"created_at": "2022-02-04T14:42:21Z",
"owner_type": "Organization",
"updated_at": "2026-07-21T19:37:13Z",
"description": "Reading and writing font files",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "https://fonts.google.com",
"name": "Google Fonts",
"type": "Organization",
"login": "googlefonts",
"company": null,
"location": "Mountain View, California",
"followers": 1785,
"avatar_url": "https://avatars.githubusercontent.com/u/6466306?v=4",
"created_at": "2014-01-22T01:07:54Z",
"is_verified": null,
"public_repos": 547,
"account_age_days": 4563
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.0.5",
"kind": "patch",
"published_at": "2023-01-05T17:43:51Z"
}
],
"recent_commits": [
{
"oid": "25229be498e7fde3d9202a005571f527c8884723",
"body": "[skera] increase MAX_VERTICES limit to 800000",
"is_bot": false,
"headline": "Merge pull request #1976 from googlefonts/port_hb_fixes",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-07-21T19:37:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "634bf4d4a79c8364cb3b10284e2a52983c575485",
"body": "Port from: https://github.com/harfbuzz/harfbuzz/pull/6086",
"is_bot": false,
"headline": "[skera] increase MAX_VERTICES limit to 800000",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-07-21T16:46:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b08fd8746782df7139580c68159041cd90c3892d",
"body": "Changes for read-fonts from read-fonts-v0.41.0 to 0.42.0\n 86d242f Make vhea version default, not computed (#1974)\n 7be5935 Add alternate sparse bit set decoding method that allows specifying a maximum output set size.\n 26503f2 [read-fonts] handle empty simple glyp\n[…]\n Combine FontRead/FontReadWithArgs\n Changes for incremental-font-transfer from incremental-font-transfer-v0.5.0 to 0.6.0\n 37b6878 Short string optimization for IFT url_template (#1961)",
"is_bot": false,
"headline": "[chore] release all crates (except font-types) with minor bump (#1975)",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-07-21T16:01:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "86d242fd44a57488a0c7c564c3833aab281ea5c9",
"body": "* Default vhea table to version 1.1, but allow changes\n\n* Regen codegen",
"is_bot": false,
"headline": "Make vhea version default, not computed (#1974)",
"author_name": "Simon Cozens",
"author_login": "simoncozens",
"committed_at": "2026-07-21T12:06:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7be593502496a4b930c0b6ccd04d47283cc16715",
"body": "… maximum output set size.",
"is_bot": false,
"headline": "Add alternate sparse bit set decoding method that allows specifying a…",
"author_name": "Garret Rieger",
"author_login": "garretrieger",
"committed_at": "2026-07-21T00:22:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbedcb2167dbd3a0d887325fdb720808072624df",
"body": "# Results\n\n```sh\n$ cargo bench -p skera\n...\n\n Running benches/skera-benchmarks.rs (target/release/deps/skera_benchmarks-a8a3a110a3aae6dc)\nroboto-latin-subset time: [405.89 µs 408.83 µs 412.40 µs]\n change: [+0.9842% +1.9785% +2.9519%] (p = 0.00 < 0.05)\n \n[…]\n1% +0.4477% +1.3558%] (p = 0.33 > 0.05)\n No change in performance detected.\nFound 16 outliers among 100 measurements (16.00%)\n 3 (3.00%) high mild\n 13 (13.00%) high severe\n```",
"is_bot": false,
"headline": "Add skera benchmarks (#1970)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-07-16T23:30:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "109f1d801695be181d16195e86194043bab54606",
"body": "…a `FontRef` (#1900)\n\n* skrifa: Support obtaining `LocalizedStrings` from name tablewithout a `FontRef`\n\nSigned-off-by: Simon Wülker <simon.wuelker@arcor.de>",
"is_bot": false,
"headline": "skrifa: Support obtaining `LocalizedStrings` from name table without …",
"author_name": "Simon Wülker",
"author_login": "simonwuelker",
"committed_at": "2026-07-16T21:29:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46e1f22acf8d07ede5e128a670c25b5146ce21c7",
"body": "[skera] increase MAX_FEATURE_INDICES",
"is_bot": false,
"headline": "Merge pull request #1969 from googlefonts/port_from_hb",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-07-15T20:19:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed57bb9ef64b79bfafc3733eba9610267c34037e",
"body": "port from: https://github.com/harfbuzz/harfbuzz/pull/6074",
"is_bot": false,
"headline": "[skera] increase MAX_FEATURE_INDICES",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-07-15T19:56:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc82097bdb932bc94f8af5dc591520474ca3f234",
"body": "* [write-fonts] Allow access to instructions on composite glyphs\n\n* [write-fonts] Support manipulation of components and overlaps bit\n\n* Address feedback",
"is_bot": false,
"headline": "Support more fields when writing glyphs (#1960)",
"author_name": "Simon Cozens",
"author_login": "simoncozens",
"committed_at": "2026-07-11T07:49:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a90709143ebb06ed1cbf652ab0f272fdc52071d6",
"body": "- Matches the version used in CI",
"is_bot": false,
"headline": "Bump Rust to 1.89 (Aug 7 2025) (#1967)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-07-10T20:45:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2056e6cd228ab4cd603aa4f94a5d30d6aa46cbb3",
"body": "These were hit on various clippy invocations that we don't run in CI.",
"is_bot": false,
"headline": "[chore] Cleanup some clippy lints (#1968)",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-07-10T20:45:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37b6878e122854cfe2b3b081ef03cf585595d20b",
"body": "- There's a slight performance pitfall in this safe implementation. ShortString::as_str does utf8 validation each time.\n- I also tried using it for `MarkList::classes` in `write-fonts/src/tables/gpos/builders.rs` as well but found no performance improvements with fontc.\n\n# Results\n\n| Benchmark \n[…]\n2.60% | Improved |\n| incremental/notosanshigh/initial | 4.1600 ms | -0.64% | No change |\n| incremental/notosanshigh/+full-article | 5.1099 ms | +0.79% | No change |",
"is_bot": false,
"headline": "Short string optimization for IFT url_template (#1961)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-07-10T18:15:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "87d48012bd5b33f79abd1b76ae7af1dc2d4d2a68",
"body": "Fixes #1958",
"is_bot": false,
"headline": "[skrifa] support cmap13 in Charmap (#1966)",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-07-10T18:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26503f2a0a24f9d0504d7ec6cb0fc4cba0e68a58",
"body": "Fixes #1962",
"is_bot": false,
"headline": "[read-fonts] handle empty simple glyph with padding (#1965)",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-07-10T18:00:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0160adc3d576b3d598be4a96a7dd1fb47343e2b",
"body": null,
"is_bot": false,
"headline": "Fixup for new Font API",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-07-10T16:36:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f28b5818a954575f1680c545497acba0cf869f3d",
"body": "I want upcoming sanitize work to pass args by value, and so we might as\nwell do it everywhere. This code is rarely called directly, so this\nshould not cause much actual breakage.",
"is_bot": false,
"headline": "[read] Pass Args by value",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-07-10T16:36:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6090c3b08e0d67535459cd5599065b9dedd7786b",
"body": null,
"is_bot": false,
"headline": "[read] Simplifiy ResolveOffset",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-07-10T16:36:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e33ce2d25798d2727579c548e96bd8f4d631a8fb",
"body": "This combines these three traits into a single FontRead trait.\n`read_with_args` becomes the default constructor, and a `read`\nconstructor is provided for free for the (general case) where Args=().\n\nThis fixes a longstanding source of headaches, where we had a blanket impl\nof `FontReadWithArgs<Args=(\n[…]\nait is that all FontRead types must also impl\nReadArgs, even though in the majority of cases Args is (). Default associated\ntypes are not supported yet, so this is boilerplate.\n\nwip: put ReadArgs back",
"is_bot": false,
"headline": "[read] Combine FontRead/FontReadWithArgs",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-07-10T16:36:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93d40d25f596914404d97b1da618f3f08a6dad6c",
"body": "A small assortment of changes to prevent panic on overflowing arithmetic or out of bounds indexing. This certainly isn't the last of these bugs but we'll fix 'em and we find 'em.\n\nThese were identified by an internal vulnerability analysis tool.",
"is_bot": false,
"headline": "[skrifa] tt hint: overflow/OOB fixes (#1964)",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-07-09T21:46:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28ad033c871ae7d330bdca6bb4a8324cbebdd0d5",
"body": "We currently limit the number of executed instructions but don't track the number of instructions skipped when handling conditional regions. A maliciously designed font can exhaust an excessive number of cycles by carefully constructing IF/ELSE regions.\n\nThis adds a counter to track the number of sk\n[…]\nhen we surpass the limit. The budget is the same as the execution budget (1M instructions) but tracked separately, effectively limiting our instruction _decode_ count to 2M per run of the interpreter.",
"is_bot": false,
"headline": "[skrifa] tt hint: limit number of skipped instructions (#1963)",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-07-09T20:30:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "699ee1d738921895e3866f7d24cb286fda84410b",
"body": "Changes for skera from skera-v0.3.0 to 0.4.0\n 0f37300 [subset-repack] Add safety limits to repacker\n 4de326f [subset] retain extension subtables\n c592c27 [subset] repacker bug fix\n 963ee44 [subset-repack] cmp order by lookup index when subtables_per_by\n[…]\n3bb0854 [subset] don't err out in case of empty name str\n Changes for incremental-font-transfer from incremental-font-transfer-v0.4.1 to 0.5.0\n 02c26de Implement custom encoder (#1950)",
"is_bot": false,
"headline": "[chore] Release skera and incremental-font-transfer (#1959)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-07-06T18:25:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a0bdb6e27a2ed50151501bf4ccae9a0ea9ee8d26",
"body": null,
"is_bot": false,
"headline": "[read] Suppress a clippy false-positive (#1957)",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-07-06T00:20:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b373cdbc6043a791fb23b3e0f413649458f5e63a",
"body": null,
"is_bot": false,
"headline": "[chore] Bump versions",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-07-04T01:16:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb8b3eb397743159713bdfc79b00e7f951c88463",
"body": null,
"is_bot": false,
"headline": "Run rustfmt on the cmap4 overlap test",
"author_name": "Sayed Kaif",
"author_login": "metsw24-max",
"committed_at": "2026-07-03T20:09:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df8598df6fa714dee528382542a74ca369348de9",
"body": null,
"is_bot": false,
"headline": "[read-fonts] use real segment start code in cmap4 iterator",
"author_name": "metsw24-max",
"author_login": "metsw24-max",
"committed_at": "2026-07-03T20:09:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02c26dedbd1f1caaaf1a02da663ad74f541689c7",
"body": "- Reduces number of dependencies\n- Slight performance improvement, probably because we don't spend 512 bytes encoding the alphabet\n\n| Benchmark | Time (mean) | Change (mean) | Status |\n|------------------------------------------|-------------|----------\n[…]\n\n| incremental/notosanshigh/initial | 4.2015 ms | −2.2124% | Performance improved |\n| incremental/notosanshigh/+full-article | 5.1723 ms | +1.3792% | Within noise threshold |",
"is_bot": false,
"headline": "Implement custom encoder (#1950)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-07-03T18:54:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd4aaef57887dd1d8a5875e38c406843e66c9cab",
"body": null,
"is_bot": false,
"headline": "Bump read-fonts version",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-07-03T18:31:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "940249fc4bb590d491934e4b9f9f06f84b1f8296",
"body": "Expose FloatItemDelta::to_f32 (new) and to_f64 (was pub(crate)) so\ndownstream crates can read the unrounded item-variation delta.\n\nPreviously the only reachable accessor was the integer-rounded\nItemVariationStore::compute_delta. Callers that need\nHarfBuzz-compatible positioning must keep the delta fractional and\nround only once, after scaling to output units; that requires the\nraw float value from compute_float_delta.\n\nAssisted by Claude Opus 4.8 (1M context)",
"is_bot": false,
"headline": "[read-fonts] Make FloatItemDelta float accessors public",
"author_name": "Behdad Esfahbod",
"author_login": "behdad",
"committed_at": "2026-07-03T18:25:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b2a56ddfbf66ea053f83c9d9478502fd6d84018",
"body": "These variable-composite fonts store their outlines in an ordinary glyf\ntable, so glyphDataFormat should be 0, not 1 (glyphDataFormat=1 is only\nfor cubic glyf outlines). Head-only change; VARC/glyf/gvar bytes are\nuntouched. .ttx dumps updated to match.\n\nHelped by Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[test-data] Set glyphDataFormat=0 in VARC test fonts",
"author_name": "Behdad Esfahbod",
"author_login": "behdad",
"committed_at": "2026-07-03T16:38:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb3431985a1b78fcd88a3388d7844816f572de61",
"body": "The VarComponent transform fields are encoded in the order translate,\nrotation, scale, skew, tcenter (per the VARC spec, and matching\nwrite-fonts, fonttools and harfbuzz). read-fonts was reading TCenter\nbefore Skew, so any component with both skew and tcenter set would be\nmis-parsed. Latent until now because no test font uses skew.\n\nHelped by Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[varc] Read SkewX/SkewY before TCenterX/TCenterY",
"author_name": "Behdad Esfahbod",
"author_login": "behdad",
"committed_at": "2026-07-03T16:38:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dec679d7d4864175e95e29509b173e67dd889003",
"body": null,
"is_bot": false,
"headline": "Guard CoverageFormat2 index overflow",
"author_name": "Behdad Esfahbod",
"author_login": "behdad",
"committed_at": "2026-06-30T19:19:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4883d5c04ef9ab5e40fa9de051e0baa650064a87",
"body": null,
"is_bot": false,
"headline": "[read] Fix overflow in CoverageFormat2::get",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-06-25T23:53:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9e4c6c8776038d2733e97c6206d351fced37acb",
"body": "[subset] retain extension subtable",
"is_bot": false,
"headline": "Merge pull request #1947 from googlefonts/retain_extension_subtable",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-25T18:46:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6f8e27f42bdcc7a224b1359a7e0507c56888e86",
"body": null,
"is_bot": false,
"headline": "Simplify/Shorten assertion messages",
"author_name": "Ricky Atkins",
"author_login": "RickyDaMa",
"committed_at": "2026-06-25T16:57:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b44f9344261a6ebeff194d0116d987319aee160f",
"body": null,
"is_bot": false,
"headline": "Improve assertion error",
"author_name": "Ricky Atkins",
"author_login": "RickyDaMa",
"committed_at": "2026-06-25T16:57:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a1ca6673d516cc9a3c61596e93e5965a6ab54aa",
"body": "Serialize to intermediary serde_json::Value instead of bytes to speed things up\nIgnored tests took ~3 minutes on my machine",
"is_bot": false,
"headline": "Add roundtrip_all tests",
"author_name": "Ricky Atkins",
"author_login": "RickyDaMa",
"committed_at": "2026-06-25T16:57:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "965ec445fac9113e10c233a87fa0db094d101d09",
"body": null,
"is_bot": false,
"headline": "Split one_is_one tests per type",
"author_name": "Ricky Atkins",
"author_login": "RickyDaMa",
"committed_at": "2026-06-25T16:57:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9db468ae71e247c8e883f655ac07918cedb4b007",
"body": null,
"is_bot": false,
"headline": "Add test for serialized format & roundtrip",
"author_name": "Ricky Atkins",
"author_login": "RickyDaMa",
"committed_at": "2026-06-25T16:57:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a45c9d863b3f821226230bdf5c141bb8ee271395",
"body": "Manually impl serde::{Serialize,Deserialize} in float_conv!\nReplaces derive annotation in fixed_impl!",
"is_bot": false,
"headline": "serde: use value (not repr) for fixed point numbers",
"author_name": "Ricky Atkins",
"author_login": "RickyDaMa",
"committed_at": "2026-06-25T16:57:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68c0ead3a41ea8efa6e05f5a06abe597a9e758c0",
"body": null,
"is_bot": false,
"headline": "Fix whitespace in docs",
"author_name": "Ricky Atkins",
"author_login": "RickyDaMa",
"committed_at": "2026-06-25T16:57:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1d51323366cbe864232692765fac231f50c59d5",
"body": "[subset-repack] Port safety limits to repacker",
"is_bot": false,
"headline": "Merge pull request #1948 from googlefonts/port_from_hb",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-24T21:07:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f373001a606d71902f4c599c16c7ffe59c14e84",
"body": "To prevent algorithmic complexity attacks: Hang/OOM during subsetting\nmalicious fonts",
"is_bot": false,
"headline": "[subset-repack] Add safety limits to repacker",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-24T20:45:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9db9e7dcd6d24bda6b84c23042a6c407c0016223",
"body": null,
"is_bot": false,
"headline": "[subset] update tests",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-24T18:23:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "493acac81caf43135627d811bf18200e9dd26093",
"body": null,
"is_bot": false,
"headline": "Update rstest dev-dependency from 0.18 to 0.26 in write-fonts",
"author_name": "Benjamin A. Beasley",
"author_login": "musicinmybrain",
"committed_at": "2026-06-24T18:11:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a59a0fc2b45e63463ee814cff9234daad254331",
"body": null,
"is_bot": false,
"headline": "Update rand dev-dependency from 0.8 to 0.10 in write-fonts",
"author_name": "Benjamin A. Beasley",
"author_login": "musicinmybrain",
"committed_at": "2026-06-24T18:11:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e98025561b3392013967c9c1b5dac9847051b69",
"body": null,
"is_bot": false,
"headline": "Update rand dev-dependency from 0.8 to 0.10 in read-fonts",
"author_name": "Benjamin A. Beasley",
"author_login": "musicinmybrain",
"committed_at": "2026-06-24T18:11:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91c622a01572051ff38fde6cc7d086cb21332e7c",
"body": null,
"is_bot": false,
"headline": "[read-fonts] read the full flag run in read_points_fast",
"author_name": "metsw24-max",
"author_login": "metsw24-max",
"committed_at": "2026-06-24T17:42:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4de326f353b13440ec2a4ab326cab29340b219e2",
"body": null,
"is_bot": false,
"headline": "[subset] retain extension subtables",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-24T17:40:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d04d15364c827ce6c55ad0d9e639af1aa20318b",
"body": "[subset] repacker bug fix",
"is_bot": false,
"headline": "Merge pull request #1938 from googlefonts/port_repacker_fix",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-24T16:44:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84790f467b78bd73c6411a9522b674849d88daf7",
"body": null,
"is_bot": false,
"headline": "Bump ift to 0.4.1 (#1946)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-23T23:31:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d0cc0a9001542421bffda4d4c651acc8b814ee8",
"body": "- Label `TTCHeader` with `allow(dead_code)` since it is only sometimes unused.",
"is_bot": false,
"headline": "Upgrade CI Rust version (#1942)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-23T19:49:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c592c271df920516d9cdc928f782cfef5d37a39f",
"body": "duplicate shared liga_sets before splitting\nPort from: https://github.com/harfbuzz/harfbuzz/pull/5972\n\nalso removed an unused fn",
"is_bot": false,
"headline": "[subset] repacker bug fix",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-23T17:42:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fa9efef7cdfc3ef7b047191a4210e89e7f11135",
"body": "Avoid Option::is_some() + Option::unwrap() pattern\n\n# Setup\n\nThe first branch only executed if `prev_segment_ix` is `None` or it it meets some other condition.\n\n```rust\n if prev_segment_ix.is_none()\n || axis.segments[segment_ix].first_ix\n \n[…]\nst\n prev_segment_ix.take_if(|idx| {\n axis.segments[segment_ix].first_ix != axis.segments[*idx].last_ix\n });\n match prev_segment_ix {\n```",
"is_bot": false,
"headline": "Fix clippy lint (#1941)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-23T16:26:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "597549fd36de3ac7fddd845873f449c47e4bfb3c",
"body": null,
"is_bot": false,
"headline": "Fix trivial clippy errors (#1940)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-23T15:38:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99e2cf021d7a5b35e26a46041c55ba0766a68b0f",
"body": "* Parse encodings on demand\n\n- Encodings are parsed and cached on demand\n- The interpreter loop was also inlined. Seems more readable as there are not too many instructions\n\n| Benchmark | Time | Change | Result |\n| :--- | :--- | :--- | :--- |\n| select-all/roboto/2-patches | 339.30 µs | -5.4227% | Im\n[…]\n/+greek-cyrillic | 1.2760 ms | -5.6375% | Improved |\n| incremental/notosanshigh/initial | 4.2660 ms | -2.7645% | Improved |\n| incremental/notosanshigh/+full-article | 5.1075 ms | -1.6747% | Improved |",
"is_bot": false,
"headline": "Parse base32hex and base64url encodings on demand (#1935)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-22T18:32:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8e1cf8e8d8bb0bc6ba74cccef9e18ef82da7efbc",
"body": "# Benchmark Results\n\n| Benchmark | Time | Change | Status |\n|------------------------------------------|-----------|----------|-----------|\n| select-all/roboto/2-patches | 353.14 µs | -6.7629% | Improved |\n| select-all/notosanshigh/877-patches \n[…]\nlic | 1.3571 ms | -4.1702% | Improved |\n| incremental/notosanshigh/initial | 4.4191 ms | -0.9452% | No change |\n| incremental/notosanshigh/+full-article | 5.1852 ms | -0.5272% | Noise |",
"is_bot": false,
"headline": "Reduce SubsetDefinition clones in IFT (#1929)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-21T02:31:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "602c8abb1cb8acd8bcfbf0b0d8fe8bdf46493d96",
"body": "The dev dependency with workspace=true was preventing publish, because\nthe version declared in the workspace doesn't exist on the registry\nuntil _after_ it is published. This is the documented fix.",
"is_bot": false,
"headline": "Fix cargo.toml version breakage",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-06-19T16:33:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9df43e797f77bcecf4ccab7494d45c72cc53d540",
"body": null,
"is_bot": false,
"headline": "Bump patch version for read/write-fonts",
"author_name": "Colin Rofls",
"author_login": "cmyr",
"committed_at": "2026-06-19T16:11:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4d87b2223bddc7a6f3d612ed708c311242cf8a0",
"body": null,
"is_bot": false,
"headline": "export FontTableFunction",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc561c9a581809420455e837609a511b436a5c5d",
"body": "to satisfy clippy",
"is_bot": false,
"headline": "feature gate once module as well",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a981259fe6a1bd1e6ef3e042f9ba6cd1696d71a3",
"body": null,
"is_bot": false,
"headline": "clippy",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc040b2f06cb95391dca1eba613521802a5991e6",
"body": "- move FontSource to its own module\n- add FontKindRepr and change FontKind to take references; this will support future support for pure CFF\n- feature gate whole API",
"is_bot": false,
"headline": "minor cleanup",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc7b1220927730704a2569a86968009f8added99",
"body": "- and some additional tests\n- fix typos",
"is_bot": false,
"headline": "add named_instance_with_overrides",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d73cb2e1c7312956cfcbe1053e0ad5a5758344cf",
"body": null,
"is_bot": false,
"headline": "add FontInstance",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ab032ba698eb97163d724e60827042dd02a4b2f",
"body": "and make `Font::tables()` infallible by using empty `FontTables` type with `TableSource::None` for non-SFNT fonts",
"is_bot": false,
"headline": "remove unused fmtx table",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e068b146043b9dccbfc0c171b0628b6ab25f222",
"body": null,
"is_bot": false,
"headline": "add table lookup benchmarks",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82cd1280adbd7d633fd207cbcd4d8fe159181e46",
"body": null,
"is_bot": false,
"headline": "add shaping data interop test",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b2bf9afe40db8ed50f2a949ff05a78437add106",
"body": null,
"is_bot": false,
"headline": "return inner Any for shaping data",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7bf83ceaf819332044057b6eae0c9c6c0b477d0",
"body": null,
"is_bot": false,
"headline": "more lints",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87573715d3be06b37c520c75226f9f8fc47e5782",
"body": null,
"is_bot": false,
"headline": "lints",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da28a9509aa29dd20df39701064c9ae05634d5e5",
"body": "Where we open the door to a more ergonomic API that supports sanitization, caching, sourcing data from platform native font handles and nicer interop for skrifa/harfrust.",
"is_bot": false,
"headline": "[read-fonts] a new Font API",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-19T15:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9610c8fa73a2db7267dfea0ec0d326d1f001730e",
"body": "[skera] Repacker bug fixes",
"is_bot": false,
"headline": "Merge pull request #1927 from googlefonts/repacker_fix",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-18T23:39:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5f642e36dd4deccac60408b4f618341890af960",
"body": "- `url_templates::copy_literals` converts from &[u8]->&str instead of Vec->String for intermediate data\n- The `s/=/%3D` replacement for `id64_string` is moved. String::replace seems to cause an extra allocation. We now push the characters individually and do the substitution there.\n\n# Benchmark Repo\n[…]\nincremental/notosanshigh/initial` | 4.5378 ms | -4.1568% | Performance has improved |\n| `incremental/notosanshigh/+full-article` | 5.3502 ms | -0.9953% | Change within noise threshold |",
"is_bot": false,
"headline": "Reduce allocations in ift expand_template (#1928)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-18T22:25:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1a4355948c0516a6e961f53859f4aea008b4b46b",
"body": null,
"is_bot": false,
"headline": "[subset] update expected test output",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-18T17:47:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "963ee44b3908aa8777ced4a82f6efe24cc9754c7",
"body": "… equal",
"is_bot": false,
"headline": "[subset-repack] cmp order by lookup index when subtables_per_byte are…",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-18T17:44:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae95aa678511db2072c442cc99f6a2002e217571",
"body": "this avoids collecting duplicate child idxes",
"is_bot": false,
"headline": "[subset-repacker] use hashmap when collecting child_idxes",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-18T17:15:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07fd2d4aed1bab16181953175da8b76603fb4359",
"body": "[subset] add additional sorting after extension promotion",
"is_bot": false,
"headline": "Merge pull request #1926 from googlefonts/fix_repacker",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-16T20:49:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0d6a0fa5e09d94290d4abfa722ae64cb83c5b84",
"body": null,
"is_bot": false,
"headline": "[subset] add repacker tests",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-16T18:10:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83c438a1dc59d8ed33748b33a0d3a96d7d528680",
"body": "assign_spaces() requires correct topological ordering to find space\nroots, so add an additional topo sorting after extension promotion and\ntable splitting to keep thing sorted",
"is_bot": false,
"headline": "[subset] add additional sorting after extension promotion",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-16T17:37:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d80480124df84bb87f28046a78822f4d9d5f197a",
"body": "Generated count expressions were casting field counts with `as usize` or\nemitting fallible conversions directly. Route those conversions through a\nshared `to_usize` helper in the generated-code preludes so the generated\nread and write tables avoid clippy noise while preserving the previous\nfallback \n[…]\n-p write-fonts\n- cargo +1.85 clippy -p read-fonts --all-features --all-targets -- -D warnings\n- cargo +1.85 clippy -p write-fonts --all-features --all-targets -- -D warnings\n\nAssisted-by: OpenAI Codex",
"is_bot": false,
"headline": "[codegen] Use helper for generated count casts (#1925)",
"author_name": "Behdad Esfahbod",
"author_login": "behdad",
"committed_at": "2026-06-16T09:53:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "acf280108573b1d6487d0dd7b721d9a9b7d3f8a9",
"body": null,
"is_bot": false,
"headline": "handle unpaired high surrogate in name table CharIter",
"author_name": "metsw24-max",
"author_login": "metsw24-max",
"committed_at": "2026-06-12T17:09:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ab0b5f871387558f751554c68ac181a43095539",
"body": "This applies the same pattern that's already used with\n`heap_fixed_coords`: Use a heap allocation if the amount of coords\nexceeds the `MAX_INLINE_AVAR2_AXES` limit.\nThis previously resulted in a crash:\n\nthread panicked at read-fonts/src/tables/fvar.rs:147:47: range end index\n65 out of range for slice of length 64",
"is_bot": false,
"headline": "read-fonts: fix oob panic in fvar.rs user_to_normalized",
"author_name": "Mrmaxmeier",
"author_login": "Mrmaxmeier",
"committed_at": "2026-06-12T17:06:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "938811c1ab8a3a8110d722ac626c05f9cc13aac3",
"body": "- criterion 0.3 → 0.7: removes serde_cbor (RUSTSEC-2021-0127) and atty\n (RUSTSEC-2024-0375, RUSTSEC-2021-0145) from criterion's dependency tree\n- bincode 1.0 → 2.0 in write-fonts: v1 is unmaintained (RUSTSEC-2025-0141);\n the serde feature enables the bincode::serde module for encode/decode, not\n \n[…]\nUSTSEC-2021-0145);\n owo-colors is actively maintained and IsTerminal is in std\n\nNot addressed: paste (RUSTSEC-2024-0436) is a transitive dep from safer-bytes\nvia woff2-patched with no direct control.",
"is_bot": false,
"headline": "fix: address RUSTSEC advisories for unmaintained crates (#1923)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-12T16:36:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "25c28a42992381173d556fdac400bc499e6a597f",
"body": "Changes for skrifa from skrifa-v0.43.1 to 0.43.2\n 491d4fc [skrifa] report adjusted advances for CFF(2) fonts (#1915)",
"is_bot": false,
"headline": "[chore] release skrifa 0.43.2 (#1921)",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-11T01:53:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c36b97e40146b401ff7cc3f70464a7bfc4667707",
"body": "[subset] fix a bug in colrv1 VarColorStop",
"is_bot": false,
"headline": "Merge pull request #1919 from googlefonts/bug_fix",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-10T18:03:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8b06d1a143ae66830a246fbe62727dd615d9589",
"body": "[subset] bug fix: always generate advMap in HVAR/VVAR even it's empty",
"is_bot": false,
"headline": "Merge pull request #1917 from googlefonts/add_tests",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-10T18:02:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7e70d27963657daa31b1f1c4f35e99799a8f8e8",
"body": "Don't embed varIndexBase twice",
"is_bot": false,
"headline": "[subset] fix a bug in colrv1 VarColorStop",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-10T17:33:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "491d4fcf01c98680a1682220ae63ff653d581abf",
"body": "We previously punted on computing (hinted) advance widths during drawing for CFF and CFF2 fonts, forcing the client to use linear glyph metrics.\n\nThis changes our CFF drawing path to populate `AdjustedMetrics::advance_width` using the width from the charstring if available, falling back to DefaultWidthX from the Private DICT or to hmtx/HVAR.",
"is_bot": false,
"headline": "[skrifa] report adjusted advances for CFF(2) fonts (#1915)",
"author_name": "Chad Brokaw",
"author_login": "dfrg",
"committed_at": "2026-06-10T16:14:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45992a52a4cb129370f3e1fbf82605268ae0a1c4",
"body": "When original advMap is empty, the serialize_subset() call would panic because\nthe subset trait requires an non-empty &self as input. By changing from\nsubset trait to serialize trait would allow always generating\nadvMap in HVAR/VVAR",
"is_bot": false,
"headline": "[subset] bug fix: always generate advMap even it's empty",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-10T15:53:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2138b468973b81624b3672bdfbfc20978a7edfd3",
"body": "- Breakdown of the bytes transferred.\n- Set of glyphs that were added to the font by the operation.",
"is_bot": false,
"headline": "Add some additional info to the output of ift_extend:",
"author_name": "Garret Rieger",
"author_login": "garretrieger",
"committed_at": "2026-06-09T20:47:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a4322034f0cc0f955501a4403f3fd1015006e38",
"body": "- The tests are still run in the CI\n- Developers need to run `cargo test -p skera -- --ignored` to trigger a local manual run",
"is_bot": false,
"headline": "Skip slow skera integration test by default (#1911)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-09T20:08:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27e3ca3585bc95477309f1dca3e851da4e394e78",
"body": "[skera] fix name table: don't err out in case of empty name str",
"is_bot": false,
"headline": "Merge pull request #1909 from googlefonts/bug_fixes",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-09T17:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3244d84faf0de6f270ca701fdd4bd0459ff390b",
"body": null,
"is_bot": false,
"headline": "[subset] skip typos check on tests input",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-09T17:47:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33b57bfbb18479ecdcf3edd637de6278b3e84cb4",
"body": null,
"is_bot": false,
"headline": "[subset] add tests",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-09T17:14:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3249748509327199fe84fea168d3d20abb9c7a9",
"body": null,
"is_bot": false,
"headline": "Parallelize skera integration test (#1912)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-09T17:12:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bb0854e2e5378c1070f2a88f36d12ee5728447b",
"body": null,
"is_bot": false,
"headline": "[subset] don't err out in case of empty name str",
"author_name": "Qunxin Liu",
"author_login": "qxliu76",
"committed_at": "2026-06-09T16:25:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94507359c79fb6dad2ce7d34f9d4c0c39a32c5df",
"body": "Skera is over the 10MB cargo package limit so we need to exclude the test data",
"is_bot": false,
"headline": "fix(package): Remove test files from package (#1906)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-09T16:18:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a45a1ffee49e5fb1357ad47c0a21ae7c6a6f125",
"body": null,
"is_bot": false,
"headline": "fix(build): Add GlyphId24 support to otexplorer (#1913)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-08T23:48:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "908452dda9e419b85191ea4332f9d36ebe0b4dfb",
"body": "This release bumps several crates, most notably promoting font-types to 0.12.0.\n\nThe previous release of font-types (0.11.4) contained breaking changes. That version and its dependents have been yanked. This update correctly reflects the breaking nature of those changes by incrementing the minor version to 0.12.0.",
"is_bot": false,
"headline": "Bump versions and promote font-types to 0.12.0 (#1908)",
"author_name": "Will",
"author_login": "wmedrano",
"committed_at": "2026-06-08T19:40:56Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 631,
"latest_release_at": "2023-01-05T17:43:51Z",
"latest_release_tag": "v0.0.5",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 47,
"days_since_latest_release": 1293,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "skera",
"exists": true,
"license": "MIT OR Apache-2.0",
"keywords": [
"text-processing"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/skera",
"is_deprecated": false,
"latest_version": "0.5.0",
"repository_url": "https://github.com/googlefonts/fontations",
"versions_count": 9,
"total_downloads": 5182,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 1495,
"first_published_at": "2026-02-10T21:58:39.643370Z",
"latest_published_at": "2026-07-21T16:04:29.652712Z",
"latest_version_yanked": false,
"days_since_latest_publish": 0
},
{
"name": "skrifa",
"exists": true,
"license": "MIT OR Apache-2.0",
"keywords": [
"parsing",
"text-processing",
"graphics"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/skrifa",
"is_deprecated": false,
"latest_version": "0.45.0",
"repository_url": "https://github.com/googlefonts/fontations",
"versions_count": 81,
"total_downloads": 16612860,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2652452,
"first_published_at": "2023-04-08T08:14:57.394030Z",
"latest_published_at": "2026-07-21T16:04:09.837559Z",
"latest_version_yanked": false,
"days_since_latest_publish": 0
},
{
"name": "font-types",
"exists": true,
"license": "MIT OR Apache-2.0",
"keywords": [
"text-processing"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/font-types",
"is_deprecated": false,
"latest_version": "0.12.1",
"repository_url": "https://github.com/googlefonts/fontations",
"versions_count": 50,
"total_downloads": 16546334,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2543867,
"first_published_at": "2022-10-07T19:04:13.589267Z",
"latest_published_at": "2026-07-04T01:17:00.019726Z",
"latest_version_yanked": false,
"days_since_latest_publish": 17
},
{
"name": "read-fonts",
"exists": true,
"license": "MIT OR Apache-2.0",
"keywords": [
"parsing",
"text-processing",
"graphics"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/read-fonts",
"is_deprecated": false,
"latest_version": "0.42.0",
"repository_url": "https://github.com/googlefonts/fontations",
"versions_count": 96,
"total_downloads": 17945699,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2789279,
"first_published_at": "2022-10-07T19:04:30.251086Z",
"latest_published_at": "2026-07-21T16:03:24.619787Z",
"latest_version_yanked": false,
"days_since_latest_publish": 0
},
{
"name": "write-fonts",
"exists": true,
"license": "MIT OR Apache-2.0",
"keywords": [
"parsing",
"text-processing",
"graphics"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/write-fonts",
"is_deprecated": false,
"latest_version": "0.51.0",
"repository_url": "https://github.com/googlefonts/fontations",
"versions_count": 99,
"total_downloads": 3978119,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 751014,
"first_published_at": "2022-10-07T19:08:46.105721Z",
"latest_published_at": "2026-07-21T16:03:52.490854Z",
"latest_version_yanked": false,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 67,
"stars": 794,
"watchers": 27,
"fork_history": {
"days": [
{
"date": "2022-09-24",
"count": 1
},
{
"date": "2022-10-05",
"count": 1
},
{
"date": "2022-10-13",
"count": 1
},
{
"date": "2023-03-21",
"count": 1
},
{
"date": "2023-05-20",
"count": 1
},
{
"date": "2023-06-08",
"count": 1
},
{
"date": "2023-07-12",
"count": 1
},
{
"date": "2023-11-11",
"count": 1
},
{
"date": "2023-12-15",
"count": 1
},
{
"date": "2024-03-14",
"count": 1
},
{
"date": "2024-04-05",
"count": 1
},
{
"date": "2024-04-10",
"count": 1
},
{
"date": "2024-04-15",
"count": 1
},
{
"date": "2024-04-18",
"count": 1
},
{
"date": "2024-07-09",
"count": 1
},
{
"date": "2024-07-11",
"count": 2
},
{
"date": "2024-07-12",
"count": 1
},
{
"date": "2024-07-25",
"count": 1
},
{
"date": "2024-09-24",
"count": 1
},
{
"date": "2024-10-25",
"count": 1
},
{
"date": "2024-11-11",
"count": 1
},
{
"date": "2024-12-04",
"count": 1
},
{
"date": "2025-01-22",
"count": 1
},
{
"date": "2025-03-16",
"count": 1
},
{
"date": "2025-03-19",
"count": 1
},
{
"date": "2025-03-20",
"count": 1
},
{
"date": "2025-03-21",
"count": 1
},
{
"date": "2025-03-27",
"count": 1
},
{
"date": "2025-03-28",
"count": 2
},
{
"date": "2025-04-06",
"count": 1
},
{
"date": "2025-04-07",
"count": 1
},
{
"date": "2025-04-26",
"count": 1
},
{
"date": "2025-05-13",
"count": 1
},
{
"date": "2025-05-26",
"count": 1
},
{
"date": "2025-05-31",
"count": 1
},
{
"date": "2025-06-04",
"count": 1
},
{
"date": "2025-07-06",
"count": 1
},
{
"date": "2025-08-29",
"count": 1
},
{
"date": "2025-09-01",
"count": 1
},
{
"date": "2025-09-06",
"count": 1
},
{
"date": "2025-09-08",
"count": 1
},
{
"date": "2025-09-15",
"count": 1
},
{
"date": "2025-10-02",
"count": 1
},
{
"date": "2025-10-06",
"count": 1
},
{
"date": "2025-10-28",
"count": 1
},
{
"date": "2025-11-18",
"count": 1
},
{
"date": "2025-11-23",
"count": 1
},
{
"date": "2025-12-27",
"count": 1
},
{
"date": "2026-01-05",
"count": 1
},
{
"date": "2026-01-09",
"count": 1
},
{
"date": "2026-03-12",
"count": 1
},
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-04-07",
"count": 1
},
{
"date": "2026-04-09",
"count": 1
},
{
"date": "2026-04-15",
"count": 1
},
{
"date": "2026-04-21",
"count": 1
},
{
"date": "2026-05-06",
"count": 1
},
{
"date": "2026-06-07",
"count": 1
},
{
"date": "2026-06-08",
"count": 2
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-10",
"count": 1
},
{
"date": "2026-06-19",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 66,
"total_forks": 67
},
"star_history": {
"days": [
{
"date": "2022-03-27",
"count": 1
},
{
"date": "2022-09-21",
"count": 1
},
{
"date": "2022-09-22",
"count": 2
},
{
"date": "2022-09-23",
"count": 3
},
{
"date": "2022-10-14",
"count": 1
},
{
"date": "2022-10-18",
"count": 1
},
{
"date": "2022-10-22",
"count": 1
},
{
"date": "2022-10-24",
"count": 1
},
{
"date": "2022-10-26",
"count": 1
},
{
"date": "2022-10-28",
"count": 1
},
{
"date": "2022-11-01",
"count": 1
},
{
"date": "2022-11-02",
"count": 2
},
{
"date": "2022-11-06",
"count": 1
},
{
"date": "2022-11-08",
"count": 1
},
{
"date": "2022-11-14",
"count": 1
},
{
"date": "2022-11-15",
"count": 1
},
{
"date": "2022-12-06",
"count": 1
},
{
"date": "2022-12-09",
"count": 1
},
{
"date": "2022-12-11",
"count": 1
},
{
"date": "2022-12-14",
"count": 2
},
{
"date": "2022-12-15",
"count": 2
},
{
"date": "2022-12-18",
"count": 1
},
{
"date": "2022-12-26",
"count": 1
},
{
"date": "2022-12-29",
"count": 2
},
{
"date": "2022-12-30",
"count": 4
},
{
"date": "2023-01-01",
"count": 1
},
{
"date": "2023-01-13",
"count": 1
},
{
"date": "2023-01-16",
"count": 1
},
{
"date": "2023-01-24",
"count": 1
},
{
"date": "2023-02-11",
"count": 1
},
{
"date": "2023-02-14",
"count": 1
},
{
"date": "2023-03-06",
"count": 1
},
{
"date": "2023-03-09",
"count": 1
},
{
"date": "2023-03-10",
"count": 1
},
{
"date": "2023-03-26",
"count": 1
},
{
"date": "2023-04-03",
"count": 1
},
{
"date": "2023-04-08",
"count": 1
},
{
"date": "2023-04-17",
"count": 1
},
{
"date": "2023-05-07",
"count": 1
},
{
"date": "2023-05-13",
"count": 1
},
{
"date": "2023-05-23",
"count": 1
},
{
"date": "2023-05-24",
"count": 1
},
{
"date": "2023-05-26",
"count": 1
},
{
"date": "2023-05-30",
"count": 1
},
{
"date": "2023-05-31",
"count": 3
},
{
"date": "2023-06-01",
"count": 1
},
{
"date": "2023-06-02",
"count": 1
},
{
"date": "2023-06-06",
"count": 1
},
{
"date": "2023-06-07",
"count": 2
},
{
"date": "2023-06-08",
"count": 1
},
{
"date": "2023-06-17",
"count": 1
},
{
"date": "2023-06-21",
"count": 1
},
{
"date": "2023-06-24",
"count": 1
},
{
"date": "2023-07-06",
"count": 1
},
{
"date": "2023-07-31",
"count": 1
},
{
"date": "2023-08-06",
"count": 1
},
{
"date": "2023-08-13",
"count": 1
},
{
"date": "2023-08-17",
"count": 4
},
{
"date": "2023-08-18",
"count": 4
},
{
"date": "2023-08-19",
"count": 2
},
{
"date": "2023-08-20",
"count": 1
},
{
"date": "2023-08-22",
"count": 4
},
{
"date": "2023-08-23",
"count": 2
},
{
"date": "2023-09-06",
"count": 1
},
{
"date": "2023-09-08",
"count": 1
},
{
"date": "2023-09-17",
"count": 2
},
{
"date": "2023-10-09",
"count": 2
},
{
"date": "2023-10-10",
"count": 1
},
{
"date": "2023-10-12",
"count": 1
},
{
"date": "2023-10-15",
"count": 1
},
{
"date": "2023-10-19",
"count": 1
},
{
"date": "2023-10-25",
"count": 1
},
{
"date": "2023-10-27",
"count": 1
},
{
"date": "2023-10-29",
"count": 2
},
{
"date": "2023-10-30",
"count": 1
},
{
"date": "2023-10-31",
"count": 2
},
{
"date": "2023-11-02",
"count": 1
},
{
"date": "2023-11-05",
"count": 1
},
{
"date": "2023-11-09",
"count": 1
},
{
"date": "2023-11-10",
"count": 1
},
{
"date": "2023-11-21",
"count": 1
},
{
"date": "2023-11-23",
"count": 1
},
{
"date": "2023-12-12",
"count": 1
},
{
"date": "2023-12-15",
"count": 1
},
{
"date": "2023-12-22",
"count": 1
},
{
"date": "2024-01-09",
"count": 3
},
{
"date": "2024-01-11",
"count": 2
},
{
"date": "2024-01-12",
"count": 1
},
{
"date": "2024-01-13",
"count": 1
},
{
"date": "2024-01-14",
"count": 1
},
{
"date": "2024-01-16",
"count": 2
},
{
"date": "2024-01-19",
"count": 2
},
{
"date": "2024-01-23",
"count": 1
},
{
"date": "2024-01-30",
"count": 1
},
{
"date": "2024-02-02",
"count": 1
},
{
"date": "2024-02-04",
"count": 2
},
{
"date": "2024-02-11",
"count": 1
},
{
"date": "2024-02-15",
"count": 1
},
{
"date": "2024-02-16",
"count": 2
},
{
"date": "2024-02-17",
"count": 2
},
{
"date": "2024-02-18",
"count": 4
},
{
"date": "2024-02-19",
"count": 4
},
{
"date": "2024-02-21",
"count": 2
},
{
"date": "2024-02-25",
"count": 1
},
{
"date": "2024-02-29",
"count": 1
},
{
"date": "2024-03-05",
"count": 1
},
{
"date": "2024-03-08",
"count": 1
},
{
"date": "2024-03-12",
"count": 1
},
{
"date": "2024-03-13",
"count": 1
},
{
"date": "2024-03-15",
"count": 1
},
{
"date": "2024-03-20",
"count": 1
},
{
"date": "2024-03-22",
"count": 1
},
{
"date": "2024-03-26",
"count": 1
},
{
"date": "2024-04-03",
"count": 1
},
{
"date": "2024-04-07",
"count": 1
},
{
"date": "2024-04-15",
"count": 2
},
{
"date": "2024-04-17",
"count": 1
},
{
"date": "2024-04-18",
"count": 8
},
{
"date": "2024-04-19",
"count": 10
},
{
"date": "2024-04-20",
"count": 1
},
{
"date": "2024-04-22",
"count": 1
},
{
"date": "2024-04-27",
"count": 2
},
{
"date": "2024-05-03",
"count": 1
},
{
"date": "2024-05-05",
"count": 1
},
{
"date": "2024-05-08",
"count": 1
},
{
"date": "2024-05-10",
"count": 1
},
{
"date": "2024-05-12",
"count": 1
},
{
"date": "2024-05-14",
"count": 1
},
{
"date": "2024-05-16",
"count": 1
},
{
"date": "2024-05-17",
"count": 1
},
{
"date": "2024-05-22",
"count": 1
},
{
"date": "2024-06-02",
"count": 1
},
{
"date": "2024-06-20",
"count": 1
},
{
"date": "2024-06-21",
"count": 1
},
{
"date": "2024-06-23",
"count": 1
},
{
"date": "2024-06-28",
"count": 2
},
{
"date": "2024-07-05",
"count": 1
},
{
"date": "2024-07-09",
"count": 6
},
{
"date": "2024-07-10",
"count": 2
},
{
"date": "2024-07-11",
"count": 36
},
{
"date": "2024-07-12",
"count": 9
},
{
"date": "2024-07-13",
"count": 14
},
{
"date": "2024-07-14",
"count": 13
},
{
"date": "2024-07-16",
"count": 3
},
{
"date": "2024-07-17",
"count": 3
},
{
"date": "2024-07-19",
"count": 1
},
{
"date": "2024-07-25",
"count": 1
},
{
"date": "2024-07-26",
"count": 1
},
{
"date": "2024-07-31",
"count": 1
},
{
"date": "2024-08-06",
"count": 1
},
{
"date": "2024-08-07",
"count": 1
},
{
"date": "2024-08-08",
"count": 3
},
{
"date": "2024-08-09",
"count": 1
},
{
"date": "2024-08-10",
"count": 31
},
{
"date": "2024-08-11",
"count": 8
},
{
"date": "2024-08-12",
"count": 3
},
{
"date": "2024-08-14",
"count": 2
},
{
"date": "2024-08-15",
"count": 1
},
{
"date": "2024-08-16",
"count": 1
},
{
"date": "2024-08-17",
"count": 1
},
{
"date": "2024-08-20",
"count": 5
},
{
"date": "2024-08-27",
"count": 1
},
{
"date": "2024-08-31",
"count": 1
},
{
"date": "2024-09-04",
"count": 1
},
{
"date": "2024-09-05",
"count": 1
},
{
"date": "2024-09-12",
"count": 2
},
{
"date": "2024-09-13",
"count": 1
},
{
"date": "2024-09-14",
"count": 1
},
{
"date": "2024-09-15",
"count": 1
},
{
"date": "2024-09-20",
"count": 1
},
{
"date": "2024-09-22",
"count": 1
},
{
"date": "2024-09-25",
"count": 3
},
{
"date": "2024-09-26",
"count": 1
},
{
"date": "2024-09-27",
"count": 1
},
{
"date": "2024-09-28",
"count": 1
},
{
"date": "2024-10-02",
"count": 1
},
{
"date": "2024-10-04",
"count": 1
},
{
"date": "2024-10-08",
"count": 1
},
{
"date": "2024-10-09",
"count": 2
},
{
"date": "2024-10-11",
"count": 1
},
{
"date": "2024-10-15",
"count": 1
},
{
"date": "2024-10-21",
"count": 1
},
{
"date": "2024-10-22",
"count": 3
},
{
"date": "2024-10-23",
"count": 2
},
{
"date": "2024-10-24",
"count": 2
},
{
"date": "2024-10-25",
"count": 1
},
{
"date": "2024-11-02",
"count": 2
},
{
"date": "2024-11-03",
"count": 3
},
{
"date": "2024-11-17",
"count": 1
},
{
"date": "2024-11-20",
"count": 1
},
{
"date": "2024-11-28",
"count": 1
},
{
"date": "2024-12-01",
"count": 1
},
{
"date": "2024-12-03",
"count": 3
},
{
"date": "2024-12-05",
"count": 2
},
{
"date": "2024-12-07",
"count": 2
},
{
"date": "2024-12-09",
"count": 2
},
{
"date": "2024-12-12",
"count": 2
},
{
"date": "2024-12-14",
"count": 2
},
{
"date": "2024-12-17",
"count": 1
},
{
"date": "2024-12-18",
"count": 1
},
{
"date": "2024-12-21",
"count": 1
},
{
"date": "2024-12-22",
"count": 2
},
{
"date": "2024-12-29",
"count": 1
},
{
"date": "2025-01-03",
"count": 1
},
{
"date": "2025-01-04",
"count": 1
},
{
"date": "2025-01-10",
"count": 1
},
{
"date": "2025-01-12",
"count": 1
},
{
"date": "2025-01-14",
"count": 1
},
{
"date": "2025-01-16",
"count": 1
},
{
"date": "2025-01-18",
"count": 1
},
{
"date": "2025-01-21",
"count": 1
},
{
"date": "2025-01-24",
"count": 2
},
{
"date": "2025-01-28",
"count": 1
},
{
"date": "2025-01-31",
"count": 1
},
{
"date": "2025-02-07",
"count": 1
},
{
"date": "2025-02-09",
"count": 1
},
{
"date": "2025-02-12",
"count": 1
},
{
"date": "2025-02-13",
"count": 1
},
{
"date": "2025-02-14",
"count": 1
},
{
"date": "2025-02-15",
"count": 1
},
{
"date": "2025-02-20",
"count": 2
},
{
"date": "2025-02-27",
"count": 1
},
{
"date": "2025-02-28",
"count": 1
},
{
"date": "2025-03-02",
"count": 1
},
{
"date": "2025-03-05",
"count": 1
},
{
"date": "2025-03-06",
"count": 2
},
{
"date": "2025-03-08",
"count": 1
},
{
"date": "2025-03-09",
"count": 1
},
{
"date": "2025-03-10",
"count": 1
},
{
"date": "2025-03-13",
"count": 1
},
{
"date": "2025-03-16",
"count": 1
},
{
"date": "2025-03-18",
"count": 1
},
{
"date": "2025-03-19",
"count": 33
},
{
"date": "2025-03-20",
"count": 51
},
{
"date": "2025-03-21",
"count": 21
},
{
"date": "2025-03-22",
"count": 15
},
{
"date": "2025-03-23",
"count": 5
},
{
"date": "2025-03-24",
"count": 9
},
{
"date": "2025-03-25",
"count": 4
},
{
"date": "2025-03-26",
"count": 4
},
{
"date": "2025-03-27",
"count": 2
},
{
"date": "2025-03-28",
"count": 1
},
{
"date": "2025-03-29",
"count": 3
},
{
"date": "2025-03-30",
"count": 1
},
{
"date": "2025-03-31",
"count": 2
},
{
"date": "2025-04-01",
"count": 1
},
{
"date": "2025-04-02",
"count": 2
},
{
"date": "2025-04-03",
"count": 1
},
{
"date": "2025-04-04",
"count": 1
},
{
"date": "2025-04-07",
"count": 1
},
{
"date": "2025-04-08",
"count": 2
},
{
"date": "2025-04-12",
"count": 2
},
{
"date": "2025-04-15",
"count": 2
},
{
"date": "2025-04-16",
"count": 2
},
{
"date": "2025-04-20",
"count": 1
},
{
"date": "2025-04-24",
"count": 1
},
{
"date": "2025-04-26",
"count": 1
},
{
"date": "2025-04-27",
"count": 1
},
{
"date": "2025-05-01",
"count": 1
},
{
"date": "2025-05-02",
"count": 2
},
{
"date": "2025-05-03",
"count": 1
},
{
"date": "2025-05-04",
"count": 1
},
{
"date": "2025-05-07",
"count": 1
},
{
"date": "2025-05-10",
"count": 1
},
{
"date": "2025-05-12",
"count": 2
},
{
"date": "2025-05-14",
"count": 1
},
{
"date": "2025-05-16",
"count": 3
},
{
"date": "2025-05-25",
"count": 1
},
{
"date": "2025-05-28",
"count": 1
},
{
"date": "2025-05-31",
"count": 3
},
{
"date": "2025-06-01",
"count": 2
},
{
"date": "2025-06-03",
"count": 1
},
{
"date": "2025-06-05",
"count": 1
},
{
"date": "2025-06-06",
"count": 1
},
{
"date": "2025-06-08",
"count": 1
},
{
"date": "2025-06-14",
"count": 1
},
{
"date": "2025-06-15",
"count": 1
},
{
"date": "2025-06-17",
"count": 1
},
{
"date": "2025-06-18",
"count": 1
},
{
"date": "2025-06-19",
"count": 1
},
{
"date": "2025-06-23",
"count": 1
},
{
"date": "2025-06-24",
"count": 1
},
{
"date": "2025-06-26",
"count": 1
},
{
"date": "2025-06-27",
"count": 1
},
{
"date": "2025-06-30",
"count": 1
},
{
"date": "2025-07-01",
"count": 2
},
{
"date": "2025-07-02",
"count": 2
},
{
"date": "2025-07-03",
"count": 1
},
{
"date": "2025-07-05",
"count": 1
},
{
"date": "2025-07-10",
"count": 1
},
{
"date": "2025-07-14",
"count": 1
},
{
"date": "2025-07-16",
"count": 1
},
{
"date": "2025-07-26",
"count": 1
},
{
"date": "2025-07-30",
"count": 1
},
{
"date": "2025-08-07",
"count": 1
},
{
"date": "2025-08-08",
"count": 1
},
{
"date": "2025-08-09",
"count": 1
},
{
"date": "2025-08-13",
"count": 2
},
{
"date": "2025-08-14",
"count": 1
},
{
"date": "2025-08-18",
"count": 1
},
{
"date": "2025-08-21",
"count": 1
},
{
"date": "2025-08-22",
"count": 1
},
{
"date": "2025-08-25",
"count": 1
},
{
"date": "2025-08-26",
"count": 1
},
{
"date": "2025-08-27",
"count": 1
},
{
"date": "2025-09-01",
"count": 1
},
{
"date": "2025-09-02",
"count": 3
},
{
"date": "2025-09-04",
"count": 1
},
{
"date": "2025-09-06",
"count": 1
},
{
"date": "2025-09-12",
"count": 1
},
{
"date": "2025-09-17",
"count": 1
},
{
"date": "2025-09-18",
"count": 1
},
{
"date": "2025-09-20",
"count": 2
},
{
"date": "2025-10-03",
"count": 1
},
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2025-10-20",
"count": 1
},
{
"date": "2025-11-01",
"count": 1
},
{
"date": "2025-11-02",
"count": 1
},
{
"date": "2025-11-07",
"count": 1
},
{
"date": "2025-11-09",
"count": 2
},
{
"date": "2025-11-13",
"count": 2
},
{
"date": "2025-11-14",
"count": 1
},
{
"date": "2025-11-18",
"count": 1
},
{
"date": "2025-11-21",
"count": 1
},
{
"date": "2025-11-24",
"count": 1
},
{
"date": "2025-11-26",
"count": 1
},
{
"date": "2025-11-28",
"count": 4
},
{
"date": "2025-12-03",
"count": 1
},
{
"date": "2025-12-07",
"count": 2
},
{
"date": "2025-12-08",
"count": 1
},
{
"date": "2025-12-09",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2025-12-13",
"count": 1
},
{
"date": "2025-12-15",
"count": 2
},
{
"date": "2025-12-16",
"count": 1
},
{
"date": "2025-12-24",
"count": 1
},
{
"date": "2025-12-30",
"count": 1
},
{
"date": "2025-12-31",
"count": 2
},
{
"date": "2026-01-08",
"count": 1
},
{
"date": "2026-01-09",
"count": 1
},
{
"date": "2026-01-10",
"count": 1
},
{
"date": "2026-01-15",
"count": 1
},
{
"date": "2026-01-23",
"count": 1
},
{
"date": "2026-01-28",
"count": 2
},
{
"date": "2026-01-29",
"count": 1
},
{
"date": "2026-01-30",
"count": 1
},
{
"date": "2026-02-02",
"count": 1
},
{
"date": "2026-02-05",
"count": 1
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-02-08",
"count": 1
},
{
"date": "2026-02-11",
"count": 1
},
{
"date": "2026-02-18",
"count": 1
},
{
"date": "2026-02-21",
"count": 1
},
{
"date": "2026-02-25",
"count": 1
},
{
"date": "2026-02-26",
"count": 1
},
{
"date": "2026-02-27",
"count": 1
},
{
"date": "2026-03-03",
"count": 1
},
{
"date": "2026-03-16",
"count": 2
},
{
"date": "2026-03-23",
"count": 2
},
{
"date": "2026-03-24",
"count": 1
},
{
"date": "2026-03-26",
"count": 2
},
{
"date": "2026-03-27",
"count": 1
},
{
"date": "2026-03-29",
"count": 1
},
{
"date": "2026-04-02",
"count": 1
},
{
"date": "2026-04-03",
"count": 1
},
{
"date": "2026-04-07",
"count": 1
},
{
"date": "2026-04-08",
"count": 2
},
{
"date": "2026-04-12",
"count": 2
},
{
"date": "2026-04-13",
"count": 1
},
{
"date": "2026-04-14",
"count": 1
},
{
"date": "2026-04-23",
"count": 3
},
{
"date": "2026-04-26",
"count": 1
},
{
"date": "2026-04-28",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-05-03",
"count": 2
},
{
"date": "2026-05-06",
"count": 1
},
{
"date": "2026-05-07",
"count": 2
},
{
"date": "2026-05-08",
"count": 1
},
{
"date": "2026-05-11",
"count": 1
},
{
"date": "2026-05-17",
"count": 1
},
{
"date": "2026-05-21",
"count": 2
},
{
"date": "2026-05-26",
"count": 4
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-05-31",
"count": 1
},
{
"date": "2026-06-02",
"count": 1
},
{
"date": "2026-06-03",
"count": 1
},
{
"date": "2026-06-06",
"count": 1
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-11",
"count": 1
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-16",
"count": 1
},
{
"date": "2026-06-19",
"count": 1
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-06-26",
"count": 2
},
{
"date": "2026-07-01",
"count": 1
},
{
"date": "2026-07-02",
"count": 1
},
{
"date": "2026-07-03",
"count": 2
},
{
"date": "2026-07-04",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-09",
"count": 2
},
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-13",
"count": 1
},
{
"date": "2026-07-17",
"count": 2
},
{
"date": "2026-07-21",
"count": 1
}
],
"complete": true,
"collected": 794,
"total_stars": 794
},
"open_issues_and_prs": 232
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml",
"fauntlet/Cargo.toml",
"font-codegen/Cargo.toml",
"font-test-data/Cargo.toml",
"font-types/Cargo.toml",
"fuzz/Cargo.toml",
"incremental-font-transfer/Cargo.toml",
"otexplorer/Cargo.toml",
"read-fonts/Cargo.toml",
"shared-brotli-patch-decoder/Cargo.toml",
"skera/Cargo.toml",
"skrifa/Cargo.toml",
"write-fonts/Cargo.toml"
],
"largest_source_bytes": 109353,
"source_files_sampled": 485,
"oversized_source_files": 13,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml",
"fauntlet/Cargo.toml",
"font-codegen/Cargo.toml",
"font-test-data/Cargo.toml",
"font-types/Cargo.toml",
"fuzz/Cargo.toml",
"incremental-font-transfer/Cargo.toml",
"otexplorer/Cargo.toml",
"read-fonts/Cargo.toml",
"shared-brotli-patch-decoder/Cargo.toml",
"skera/Cargo.toml",
"skrifa/Cargo.toml",
"write-fonts/Cargo.toml"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "fonttools",
"direct": false,
"version": "4.52.4",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 6.3,
"advisory_ids": [
"GHSA-768j-98cg-p3fv",
"PYSEC-2026-1389"
],
"fixed_version": "4.60.2",
"advisory_count": 2,
"oldest_advisory_days": 232
},
{
"name": "fonttools",
"direct": false,
"version": "4.53.0",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 6.3,
"advisory_ids": [
"GHSA-768j-98cg-p3fv",
"PYSEC-2026-1389"
],
"fixed_version": "4.60.2",
"advisory_count": 2,
"oldest_advisory_days": 232
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"moderate": 2
},
"advisory_count": 4,
"affected_count": 2,
"assessed_count": 4,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 35,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "skrifa",
"manifest": "fauntlet/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "freetype-rs",
"manifest": "fauntlet/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.38.0"
},
{
"name": "memmap2",
"manifest": "fauntlet/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.5.10"
},
{
"name": "rayon",
"manifest": "fauntlet/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "clap",
"manifest": "fauntlet/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "4.4.7"
},
{
"name": "wild",
"manifest": "fauntlet/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.2.0"
},
{
"name": "similar",
"manifest": "fauntlet/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.3.0"
},
{
"name": "font-types",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "rustfmt-wrapper",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.2"
},
{
"name": "home",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "=0.5.11"
},
{
"name": "regex",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.5"
},
{
"name": "miette",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "5.0"
},
{
"name": "syn",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0"
},
{
"name": "proc-macro2",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "quote",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "toml",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.8.19"
},
{
"name": "serde",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "xflags",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.3.0"
},
{
"name": "log",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.4"
},
{
"name": "rayon",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "indexmap",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0"
},
{
"name": "env_logger",
"manifest": "font-codegen/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "font-types",
"manifest": "font-test-data/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytemuck",
"manifest": "font-types/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "font-types/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "read-fonts",
"manifest": "incremental-font-transfer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "write-fonts",
"manifest": "incremental-font-transfer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "font-types",
"manifest": "incremental-font-transfer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "skrifa",
"manifest": "incremental-font-transfer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "skera",
"manifest": "incremental-font-transfer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "shared-brotli-patch-decoder",
"manifest": "incremental-font-transfer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "woff2-patched",
"manifest": "incremental-font-transfer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.4.0"
},
{
"name": "clap",
"manifest": "incremental-font-transfer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "4.5.4"
},
{
"name": "regex",
"manifest": "incremental-font-transfer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.11.1"
},
{
"name": "owo-colors",
"manifest": "otexplorer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "4"
},
{
"name": "font-types",
"manifest": "otexplorer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "read-fonts",
"manifest": "otexplorer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "xflags",
"manifest": "otexplorer/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.3.0"
},
{
"name": "font-types",
"manifest": "read-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "serde",
"manifest": "read-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "core_maths",
"manifest": "read-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytemuck",
"manifest": "read-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "once_cell",
"manifest": "read-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.21.4"
},
{
"name": "brotli-decompressor",
"manifest": "shared-brotli-patch-decoder/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "5.0.0"
},
{
"name": "cfg-if",
"manifest": "shared-brotli-patch-decoder/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0.0"
},
{
"name": "clap",
"manifest": "skera/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "4.5.4"
},
{
"name": "hashbrown",
"manifest": "skera/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.17.0"
},
{
"name": "skrifa",
"manifest": "skera/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "thiserror",
"manifest": "skera/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0"
},
{
"name": "write-fonts",
"manifest": "skera/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "read-fonts",
"manifest": "skrifa/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "core_maths",
"manifest": "skrifa/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "bytemuck",
"manifest": "skrifa/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "font-types",
"manifest": "write-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "read-fonts",
"manifest": "write-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "log",
"manifest": "write-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.4"
},
{
"name": "kurbo",
"manifest": "write-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "dot2",
"manifest": "write-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "serde",
"manifest": "write-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.0"
},
{
"name": "indexmap",
"manifest": "write-fonts/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "brotli-decompressor",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "cfg-if",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "clap",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "dot2",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "freetype-rs",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "hashbrown",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "home",
"direct": true,
"version": "0.5.11",
"ecosystem": "crates"
},
{
"name": "indexmap",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "log",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "memmap2",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "miette",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "once_cell",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "owo-colors",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "proc-macro2",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "quote",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "regex",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "rustfmt-wrapper",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "serde",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "similar",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "syn",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "thiserror",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "toml",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "wild",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "woff2-patched",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "xflags",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "bincode",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "brotlic",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "cc",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "diff",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "libfuzzer-sys",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "nu-ansi-term",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "pretty_assertions",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "rand",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "rstest",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "serde_json",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "tempfile",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "fonttools",
"direct": false,
"version": "4.52.4",
"ecosystem": "pypi"
},
{
"name": "fonttools",
"direct": false,
"version": "4.53.0",
"ecosystem": "pypi"
},
{
"name": "freetype-py",
"direct": false,
"version": "2.4.0",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 39,
"direct_count": 25,
"indirect_count": 14
}
},
"maintainership": {
"issues": {
"open_prs": 33,
"merged_prs": 1422,
"open_issues": 199,
"closed_ratio": 0.526,
"closed_issues": 221,
"closed_unmerged_prs": 91
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "cmyr",
"commits": 948,
"avatar_url": "https://avatars.githubusercontent.com/u/3330916?v=4"
},
{
"type": "User",
"login": "dfrg",
"commits": 582,
"avatar_url": "https://avatars.githubusercontent.com/u/420008?v=4"
},
{
"type": "User",
"login": "garretrieger",
"commits": 388,
"avatar_url": "https://avatars.githubusercontent.com/u/10966419?v=4"
},
{
"type": "User",
"login": "rsheeter",
"commits": 346,
"avatar_url": "https://avatars.githubusercontent.com/u/6466432?v=4"
},
{
"type": "User",
"login": "qxliu76",
"commits": 274,
"avatar_url": "https://avatars.githubusercontent.com/u/48925186?v=4"
},
{
"type": "User",
"login": "anthrotype",
"commits": 196,
"avatar_url": "https://avatars.githubusercontent.com/u/6939968?v=4"
},
{
"type": "User",
"login": "behdad",
"commits": 164,
"avatar_url": "https://avatars.githubusercontent.com/u/142891?v=4"
},
{
"type": "User",
"login": "simoncozens",
"commits": 59,
"avatar_url": "https://avatars.githubusercontent.com/u/106728?v=4"
},
{
"type": "User",
"login": "wmedrano",
"commits": 59,
"avatar_url": "https://avatars.githubusercontent.com/u/5521491?v=4"
},
{
"type": "User",
"login": "drott",
"commits": 32,
"avatar_url": "https://avatars.githubusercontent.com/u/1021784?v=4"
}
],
"contributors_sampled": 32,
"top_contributor_share": 0.3
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"rust.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 8,
"reason": "Found 20/24 approved changesets -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 25 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 9,
"reason": "SAST tool is not run on all commits -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "25229be498e7fde3d9202a005571f527c8884723",
"ran_at": "2026-07-21T22:53:12Z",
"aggregate_score": 7.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-21T19:41:30Z",
"oldest_open_prs": [
{
"number": 576,
"created_at": "2023-08-15T18:41:27Z",
"last_comment_at": "2023-08-16T16:54:50Z",
"last_comment_author": "cmyr"
},
{
"number": 1105,
"created_at": "2024-08-22T14:11:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1214,
"created_at": "2024-10-31T11:56:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1269,
"created_at": "2024-11-29T14:27:45Z",
"last_comment_at": "2026-06-04T11:51:12Z",
"last_comment_author": "simoncozens"
},
{
"number": 1329,
"created_at": "2025-01-24T18:29:07Z",
"last_comment_at": "2025-10-26T11:00:59Z",
"last_comment_author": "nicoburns"
},
{
"number": 1454,
"created_at": "2025-03-28T19:47:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1475,
"created_at": "2025-04-23T15:39:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1496,
"created_at": "2025-05-13T17:02:00Z",
"last_comment_at": "2026-06-27T18:51:53Z",
"last_comment_author": "stacygaudreau"
},
{
"number": 1497,
"created_at": "2025-05-19T23:01:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1552,
"created_at": "2025-07-04T22:50:16Z",
"last_comment_at": "2026-07-21T18:21:59Z",
"last_comment_author": "dfrg"
},
{
"number": 1553,
"created_at": "2025-07-05T08:42:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1555,
"created_at": "2025-07-07T12:05:37Z",
"last_comment_at": "2025-07-11T02:03:10Z",
"last_comment_author": "cmyr"
},
{
"number": 1576,
"created_at": "2025-07-24T11:37:30Z",
"last_comment_at": "2025-08-28T12:36:03Z",
"last_comment_author": "dfrg"
},
{
"number": 1583,
"created_at": "2025-08-05T15:19:34Z",
"last_comment_at": "2025-08-06T17:40:09Z",
"last_comment_author": "dfrg"
},
{
"number": 1584,
"created_at": "2025-08-05T17:08:37Z",
"last_comment_at": "2025-08-05T19:34:01Z",
"last_comment_author": "behdad"
},
{
"number": 1588,
"created_at": "2025-08-06T15:47:51Z",
"last_comment_at": "2025-08-12T13:13:41Z",
"last_comment_author": "dfrg"
},
{
"number": 1630,
"created_at": "2025-08-22T17:45:22Z",
"last_comment_at": "2025-09-12T16:20:07Z",
"last_comment_author": "behdad"
},
{
"number": 1631,
"created_at": "2025-08-24T02:59:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1658,
"created_at": "2025-09-13T23:31:52Z",
"last_comment_at": "2025-09-19T16:28:56Z",
"last_comment_author": "rsheeter"
},
{
"number": 1660,
"created_at": "2025-09-15T17:13:54Z",
"last_comment_at": "2025-09-16T16:09:10Z",
"last_comment_author": "cmyr"
}
],
"last_merged_pr_at": "2026-07-21T19:37:08Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 65,
"created_at": "2022-10-19T16:46:35Z",
"last_comment_at": "2022-10-20T16:59:22Z",
"last_comment_author": "rsheeter"
},
{
"number": 73,
"created_at": "2022-10-20T18:16:32Z",
"last_comment_at": "2023-03-27T18:35:25Z",
"last_comment_author": "rsheeter"
},
{
"number": 80,
"created_at": "2022-10-21T18:27:07Z",
"last_comment_at": "2022-10-21T23:03:07Z",
"last_comment_author": "rsheeter"
},
{
"number": 89,
"created_at": "2022-10-25T16:32:20Z",
"last_comment_at": "2022-11-03T15:21:10Z",
"last_comment_author": "cmyr"
},
{
"number": 108,
"created_at": "2022-11-02T18:19:49Z",
"last_comment_at": "2022-11-02T20:57:54Z",
"last_comment_author": "cmyr"
},
{
"number": 115,
"created_at": "2022-11-04T19:57:57Z",
"last_comment_at": "2022-11-05T20:39:50Z",
"last_comment_author": "rsheeter"
},
{
"number": 118,
"created_at": "2022-11-04T23:00:32Z",
"last_comment_at": "2022-11-07T18:10:26Z",
"last_comment_author": "cmyr"
},
{
"number": 119,
"created_at": "2022-11-05T18:06:30Z",
"last_comment_at": "2022-11-07T14:27:32Z",
"last_comment_author": "cmyr"
},
{
"number": 123,
"created_at": "2022-11-05T19:52:14Z",
"last_comment_at": "2022-11-09T18:18:28Z",
"last_comment_author": "rsheeter"
},
{
"number": 140,
"created_at": "2022-11-12T03:41:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 155,
"created_at": "2022-11-28T19:33:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 157,
"created_at": "2022-11-29T16:52:52Z",
"last_comment_at": "2022-12-18T16:44:59Z",
"last_comment_author": "rsheeter"
},
{
"number": 184,
"created_at": "2022-12-17T00:39:25Z",
"last_comment_at": "2022-12-19T16:32:08Z",
"last_comment_author": "dfrg"
},
{
"number": 192,
"created_at": "2022-12-21T00:36:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 194,
"created_at": "2023-01-11T16:21:56Z",
"last_comment_at": "2023-01-13T03:02:40Z",
"last_comment_author": "cmyr"
},
{
"number": 195,
"created_at": "2023-01-11T16:23:42Z",
"last_comment_at": "2023-01-19T16:02:55Z",
"last_comment_author": "cmyr"
},
{
"number": 196,
"created_at": "2023-01-12T16:48:24Z",
"last_comment_at": "2023-01-13T04:27:03Z",
"last_comment_author": "rsheeter"
},
{
"number": 200,
"created_at": "2023-01-13T04:32:14Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 201,
"created_at": "2023-01-13T04:53:14Z",
"last_comment_at": "2023-01-13T18:23:04Z",
"last_comment_author": "rsheeter"
},
{
"number": 202,
"created_at": "2023-01-13T15:53:51Z",
"last_comment_at": "2025-09-26T23:05:29Z",
"last_comment_author": "nicoburns"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/googlefonts/fontations",
"host": "github.com",
"name": "fontations",
"owner": "googlefonts"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"security": 78,
"vitality": 75,
"community": 70,
"governance": 80,
"engineering": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 75,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 96,
"inputs": {
"commits_last_year": 631,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 47
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "47/52 weeks with commits",
"points": 32.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 47
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "631 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 631
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"releases_count": 1,
"latest_release_tag": "v0.0.5",
"releases_from_tags": false,
"days_since_latest_release": 1293,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1293 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 1293
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 70,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"forks": 67,
"stars": 794,
"watchers": 27,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "794 stars",
"points": 47,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 794
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "67 forks",
"points": 15.2,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 67
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "27 watchers",
"points": 7.9,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 27
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"packages": [
"skera",
"skrifa",
"font-types",
"read-fonts",
"write-fonts"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 55088194,
"monthly_downloads": 8738107
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "8,738,107 downloads/month across crates",
"points": 80,
"status": "met",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 8738107,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 80,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 32,
"top_contributor_share": 0.3
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 30% of commits",
"points": 15.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 30
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "32 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 32
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 25 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"merged_prs": 1422,
"open_issues": 199,
"closed_issues": 221,
"issue_closed_ratio": 0.526,
"closed_unmerged_prs": 91
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "53% of issues closed",
"points": 24.6,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 53
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1422/1513 decided PRs merged",
"points": 35.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1422,
"decided": 1513
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 20/24 approved changesets -- score normalized to 8",
"points": 12,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"followers": 1785,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "googlefonts",
"public_repos": 547,
"account_age_days": 4563
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,785 followers of googlefonts",
"points": 23.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1785,
"login": "googlefonts"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "547 public repos, account ~12 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 547
}
},
{
"code": "account_age_years",
"params": {
"years": 12
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"skera",
"skrifa",
"font-types",
"read-fonts",
"write-fonts"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "5 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 5,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "99 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 99
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 78,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 73,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 7.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 20/24 approved changesets -- score normalized to 8",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 25 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 9",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 4 resolved dependencies against OSV; 35 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 4
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 35
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 4,
"affected_packages": 2,
"assessed_packages": 4,
"unassessed_packages": 35,
"affected_by_severity": "moderate 2",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 4,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 15
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 50,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.58,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "58 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 30.9,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 58,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"Cargo.toml",
"fauntlet/Cargo.toml",
"font-codegen/Cargo.toml",
"font-test-data/Cargo.toml",
"font-types/Cargo.toml",
"fuzz/Cargo.toml",
"incremental-font-transfer/Cargo.toml",
"otexplorer/Cargo.toml",
"read-fonts/Cargo.toml",
"shared-brotli-patch-decoder/Cargo.toml",
"skera/Cargo.toml",
"skrifa/Cargo.toml",
"write-fonts/Cargo.toml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Cargo.toml, fauntlet/Cargo.toml, font-codegen/Cargo.toml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "Cargo.toml, fauntlet/Cargo.toml, font-codegen/Cargo.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 109353,
"source_files_sampled": 485,
"oversized_source_files": 13
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "13/485 source files over 60KB",
"points": 53.5,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 485,
"oversized": 13
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Could not fetch crates package 'fauntlet' from its registry",
"Could not fetch crates package 'otexplorer' from its registry",
"Could not fetch crates package 'font-codegen' from its registry",
"deps.dev does not index crates:skera@0.5.0; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-21T22:53:42.766833Z",
"schema_version": "0.25.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/googlefonts/fontations.svg",
"full_name": "googlefonts/fontations",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.25.0 — повна методологія · вікі метрик.
Як окремий результат виглядає на тлі всього реєстру: сукупна статистика — crates.io.