lance0/xfr має індекс здоров’я 68 зі 100, що відповідає смузі «Помірний». Найвищий показник — Engineering Quality (90/100), найнижчий — Security (52/100). Останнє оновлення було 4 дні тому. Більшість нещодавньої роботи виконує один учасник.
68
загалом / 100
Помірний
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
68
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Докладніше
Історія зірок і форків 0 ★ / 21 ⇿
0Зірки
21Форки
27Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 4Патчі 23
OpenSSF Scorecard 5.2 / 10
5.2сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-23 11:43 UTC
Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"bandwidth",
"benchmark",
"cli",
"iperf",
"network",
"rust",
"tui"
],
"is_fork": false,
"size_kb": 2162,
"has_wiki": true,
"homepage": null,
"languages": {
"Nix": 2287,
"Rust": 1146388,
"Shell": 33112
},
"pushed_at": "2026-07-19T05:56:36Z",
"created_at": "2026-01-31T23:43:42Z",
"owner_type": "User",
"updated_at": "2026-07-22T19:11:41Z",
"description": "A modern iperf3 alternative with a live TUI, multi-client server, and QUIC support. Built in Rust.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Rust",
"significant_languages": [
"Rust"
]
},
"owner": {
"blog": "lance0.com",
"name": "lance",
"type": "User",
"login": "lance0",
"company": null,
"location": null,
"followers": 115,
"avatar_url": "https://avatars.githubusercontent.com/u/3323861?v=4",
"created_at": "2013-01-20T23:43:42Z",
"is_verified": null,
"public_repos": 61,
"account_age_days": 4931
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.9.21",
"kind": "patch",
"published_at": "2026-07-06T19:56:57Z"
},
{
"tag": "v0.9.20",
"kind": "patch",
"published_at": "2026-06-23T13:01:21Z"
},
{
"tag": "v0.9.19",
"kind": "patch",
"published_at": "2026-06-14T15:15:35Z"
},
{
"tag": "v0.9.18",
"kind": "patch",
"published_at": "2026-06-11T19:41:13Z"
},
{
"tag": "v0.9.17",
"kind": "patch",
"published_at": "2026-06-11T15:17:32Z"
},
{
"tag": "v0.9.16",
"kind": "patch",
"published_at": "2026-06-10T18:19:52Z"
},
{
"tag": "v0.9.14",
"kind": "patch",
"published_at": "2026-05-03T23:14:22Z"
},
{
"tag": "v0.9.13",
"kind": "patch",
"published_at": "2026-05-03T17:08:23Z"
},
{
"tag": "v0.9.12",
"kind": "patch",
"published_at": "2026-05-03T00:33:56Z"
},
{
"tag": "v0.9.11",
"kind": "patch",
"published_at": "2026-04-30T15:15:43Z"
},
{
"tag": "v0.9.10",
"kind": "patch",
"published_at": "2026-04-22T20:07:01Z"
},
{
"tag": "v0.9.9",
"kind": "patch",
"published_at": "2026-04-21T03:55:45Z"
},
{
"tag": "v0.9.8",
"kind": "patch",
"published_at": "2026-04-17T19:57:47Z"
},
{
"tag": "v0.9.7",
"kind": "patch",
"published_at": "2026-04-16T15:26:12Z"
},
{
"tag": "v0.9.6",
"kind": "patch",
"published_at": "2026-03-18T12:53:13Z"
},
{
"tag": "v0.9.5",
"kind": "patch",
"published_at": "2026-03-17T14:41:24Z"
},
{
"tag": "v0.9.4",
"kind": "patch",
"published_at": "2026-03-11T17:00:06Z"
},
{
"tag": "v0.9.3",
"kind": "patch",
"published_at": "2026-03-10T14:54:18Z"
},
{
"tag": "v0.9.2",
"kind": "patch",
"published_at": "2026-03-06T20:34:58Z"
},
{
"tag": "v0.9.1",
"kind": "patch",
"published_at": "2026-03-05T18:48:23Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-02-12T20:42:45Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2026-02-12T15:09:14Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-02-11T21:27:12Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2026-02-10T18:19:07Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-02-06T19:21:25Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-02-05T19:01:36Z"
},
{
"tag": "v0.4.4",
"kind": "patch",
"published_at": "2026-02-04T21:03:35Z"
},
{
"tag": "v0.4.3",
"kind": "patch",
"published_at": "2026-02-04T15:32:49Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-02-03T16:29:35Z"
}
],
"recent_commits": [
{
"oid": "ec39ea55ae7e0fc08984ddcedc9fc1827683ad37",
"body": "ci: add typo checks",
"is_bot": false,
"headline": "Merge pull request #141 from lance0/ci/typos-check",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-09T20:35:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "198c618e491000f52924d5ec913842831081ddb2",
"body": null,
"is_bot": false,
"headline": "ci: trim typos allowlist",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-09T20:31:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d7b7b46d03e8cd9f3c1c8404647737d2f31d3d5",
"body": null,
"is_bot": false,
"headline": "ci: add typo checks",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-09T20:28:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30145b64316273178f3b5516f7f2d19b6abfb221",
"body": "ci: compile Windows paths",
"is_bot": false,
"headline": "Merge pull request #140 from lance0/ci/windows-cargo-check",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-09T20:24:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "768beec68ce516194d00038f6b623748e923f8d8",
"body": null,
"is_bot": false,
"headline": "ci: compile Windows paths",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-09T20:19:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09f7416a3fd80833fb3e29e8ef2f5cd5769181e7",
"body": "feat(config): add client transport defaults",
"is_bot": false,
"headline": "Merge pull request #139 from lance0/feat/client-config-parity",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-09T20:16:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be959e3216998438e7e97bdc6fe863821b060889",
"body": null,
"is_bot": false,
"headline": "fix(tui): satisfy stable clippy",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-09T19:55:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0bc2acc2e986b606e32eeb46cc6633c8578d4b5",
"body": null,
"is_bot": false,
"headline": "feat(config): add client transport defaults",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-09T19:37:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e723f3fe73a42c505baf35d7ee3258c86651271",
"body": "docs/demo.gif (~198 KB) and docs/demo.tape are README/recording assets, not\nneeded to build or use the crate. crates.io resolves the README image link\nagainst the repository, so the preview still renders there — this only trims\nthe .crate tarball.",
"is_bot": false,
"headline": "build: exclude the demo GIF and tape from the published crate",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-07T15:01:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d1b26fc578ea3dd868b0e5c937d4fa58caaadaf",
"body": "docs: animated TUI demo GIF as the README preview",
"is_bot": false,
"headline": "Merge pull request #138 from lance0/docs/demo-gif",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-07T14:22:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59a67040a7095b347755d812e4fb7ef5a99e5748",
"body": "Replace the static xfr-ss.png screenshot with a VHS-recorded GIF of the live\nTUI: a rate-limited (-b 1G) TCP test against a local server showing the\nreal-time throughput graph, per-second speed/RTT/retransmit stats, and the\nSettings modal. Rendered from docs/demo.tape (reproduce steps in its header);\nruns in a throwaway HOME so it is deterministic and touches no real config.",
"is_bot": false,
"headline": "docs: animated TUI demo GIF as the README preview",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-07T14:20:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6350eb5e60d6762918fdeac68237b44aaf810dae",
"body": "…abling-update-check\n\nfeat(update): allow disabling the update check (LAN-235)",
"is_bot": false,
"headline": "Merge pull request #137 from lance0/lancey3/lan-235-feature-allow-dis…",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-07T14:05:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "035adb2cb74d16ea9c5850db7948486296eb966d",
"body": "- examples/config.toml shipped an active `no_update_check = false`. Because an\n explicit config value wins over the saved pref (by design), that would defeat\n a user's persisted TUI \"Update check: off\" toggle for anyone who copied the\n example. Comment it out so an unset config lets the TUI toggl\n[…]\n table and man page CLIENT OPTIONS; DO_NOT_TRACK /\n XFR_NO_UPDATE_CHECK in the man page ENVIRONMENT section; and a \"Disabling the\n update check\" section in docs/FEATURES.md with the full precedence.",
"is_bot": false,
"headline": "docs(update): document the opt-out and fix the example config",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-07T13:59:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9bb8229b759fe6d6d7515abceae8cf06e0186e3e",
"body": "The resolution OR-chain flattened the config/pref tristate with\nunwrap_or(false), so Some(false) (\"explicitly enabled\") and None (\"unset\")\nwere indistinguishable: an explicit no_update_check = false in config.toml\ncould not re-enable the check over a stale disable_update_check = true in\nprefs.toml.\n\n[…]\nk_disabled, where an explicit config\nvalue wins over the saved pref (matching the existing theme CLI>config>saved\nprecedence). Add a unit test covering the precedence, including the\ncompiled-out path.",
"is_bot": false,
"headline": "fix(update): let config.toml override a stale prefs toggle",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-07T13:39:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "61203144a8bdf0a53ce3ef10a53d2bdeab1b968d",
"body": "The background \"newer release available\" check (update-informer against the\nGitHub API, run in TUI mode) had no opt-out, which is unwanted when xfr is\ninstalled from a package repository or run in locked-down environments.\n\nAdd opt-outs at every layer:\n- --no-update-check CLI flag\n- DO_NOT_TRACK (cr\n[…]\ne (default-on): --no-default-features drops the\n update-informer dependency entirely, so package builds ship no phone-home code\n\nResolution precedence: compiled-out > env > CLI > config > saved pref.",
"is_bot": false,
"headline": "feat(update): allow disabling the update check (LAN-235)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-07T13:33:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "689d99f6eaaab7243d5c06699ef796175bd28c08",
"body": "Invalid pointer dereference in the fmt::Pointer impl (fixed >=0.9.20).\nTransitive dev-dependency only (criterion -> rayon -> crossbeam-deque ->\ncrossbeam-epoch), not in release binaries. Lockfile-only, MSRV 1.88 intact.",
"is_bot": false,
"headline": "deps: bump crossbeam-epoch 0.9.18 -> 0.9.20 (RUSTSEC-2026-0204)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-07T13:05:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24861f1c4e982e3550d99ae007f8fba459c62cf0",
"body": "…pt [skip ci]",
"is_bot": false,
"headline": "docs: fix stale ROADMAP CI note and Cyrillic homoglyph in verify scri…",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T21:48:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20607018a60354b7b70b0edb26fe12a1a770072a",
"body": "ci: migrate cross builds to cargo-zigbuild",
"is_bot": false,
"headline": "Merge pull request #136 from lance0/ci/zigbuild",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-06T21:13:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82d08843843efb4f535c8598bc3d7d994ce1281c",
"body": "Addresses the adversarial-review finding that the release toolchain was\nnon-reproducible: setup-zig defaulted to Zig master (an ephemeral nightly),\ncargo-zigbuild came from crates.io latest, and cross was built from the\nmoving main branch — any of which could drift and change or break a future\ntag b\n[…]\nused:\n- Zig 0.16.0 (latest stable; cargo-zigbuild 0.23.0 supports zig 0.15+)\n- cargo-zigbuild 0.23.0 (--version)\n- cross main @ 64b5bb4d (--rev)\n\nBump these intentionally via dependency-update review.",
"is_bot": false,
"headline": "ci: pin zig / cargo-zigbuild / cross to known-good versions",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T21:09:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e89b79f8913fcea5e5adc441149e753eff9c3f93",
"body": "Add scripts/verify-target-binary.sh, used by both workflows:\n- resolves the binary tolerant of cargo-zigbuild's glibc-suffixed target dir,\n failing loudly (with a find dump) if neither path holds an executable\n- gnu targets: asserts no required GLIBC symbol above the 2.17 floor\n- musl targets: asse\n[…]\nfy + package by base target,\nartifact names unchanged). ci.yml cross-smoke runs it as an ABI check on the\nzigbuild targets, so a build that links the wrong ABI fails the PR, not just a\nfuture release.",
"is_bot": false,
"headline": "ci: verify cross-built binary ABI and fail loudly on missing binary",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T20:59:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f720617173e324503be54231753d67539854eeb",
"body": "cross 0.2.5's aarch64 images ship an x86_64 glibc too old to run build\nscripts produced by modern Rust (1.96), so `cross build` for\naarch64-unknown-linux-{gnu,musl} fails with GLIBC_2.28+ symbol errors on a\nfresh build (masked intermittently by CI caching). release.yml built the\nsame targets with th\n[…]\nls install.\n\nci.yml cross-smoke now covers all 5 release targets in debug on every PR.\nRelease artifact names are unchanged (packaged by base target, tolerant of\nzigbuild's glibc-suffixed output dir).",
"is_bot": false,
"headline": "ci: migrate cross builds to cargo-zigbuild (fix aarch64 glibc failures)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T20:53:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bf773aec2f18140478216546d46e60cf86820c72",
"body": "The PR-CI build/test/clippy already pass --locked; the release job's actual\nbinary builds (native + cross, and the completions build) did not, so a\nCargo.toml/Cargo.lock drift could ship binaries built from a resolved graph\nthat differs from the committed lockfile. Add --locked to all three so the\nshipped artifacts are built from exactly the locked dependency graph.",
"is_bot": false,
"headline": "ci(release): build release binaries with --locked",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T20:28:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b80e852bef3983c84f2f1e329df65582bc0faad5",
"body": "ci: harden the PR pipeline",
"is_bot": false,
"headline": "Merge pull request #135 from lance0/ci/hardening",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-06T20:27:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ccfece3687c3a235cf4d20305e918af559c5c4a",
"body": "- cross-target smoke matrix (4 Linux/Android targets via cross) on every PR:\n catches the release-time glibc-symbol class that killed v0.9.15 before tag;\n subsumes the old single cross-aarch64-gnu job\n- test + clippy feature matrices (--all-features, --no-default-features):\n catches the LAN-172 d\n[…]\nbuilt binary (ci + release)\n- audit.yml skipped on code-only PRs via Cargo.toml/lock path filter\n\nDeferred CI ideas (cargo-deny, typos, Windows check, nightly concurrency\nsanitizer) logged in ROADMAP.",
"is_bot": false,
"headline": "ci: harden the PR pipeline",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T20:22:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "213d6c34c60611309e9ae34af336bcf3007cbf11",
"body": "Add a verify-ghcr job (needs: [docker]) that inspects the pushed\nghcr.io/lance0/xfr:<version> multi-arch tag and fails the run if either\nlinux/amd64 or linux/arm64 is missing, so a \"succeeded but incomplete\"\ncontainer push is visible. The release job's needs are unchanged, so a\ndocker/verify failure never blocks the GitHub release or crates.io -\nthe container image is a recoverable publishing incident, backfilled by\nre-running the docker job.",
"is_bot": false,
"headline": "ci(release): verify GHCR image after publish, document docker decoupling",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T20:10:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24b93d866e9b34320e22de5b79ff2c986ccc462f",
"body": null,
"is_bot": false,
"headline": "Bump version to v0.9.21",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T19:50:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e14851af50f60a584170965b2e82275f10fe62d3",
"body": "fix: cancel-sender-drop busy-loops and MPTCP validation (LAN-170)",
"is_bot": false,
"headline": "Merge pull request #131 from lance0/lan-170",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-06T19:10:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "faff760a4f64ed9ca1f2283827c6903ae1bca1da",
"body": null,
"is_bot": false,
"headline": "fix(quic): reschedule tee after divert-only receive batches",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T19:07:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10da7500c7de5dce9f011ae57ef9a9635fc63153",
"body": "Fixes three classes of busy-loop bugs where `_ = cancel.changed()`\ndiscards the `Err` from a dropped watch sender, causing the receive\nloop to spin:\n\n- quic.rs receive_quic_data: extract handle_cancel_change helper,\n break on Err (sender dropped) or cancel=true\n- tcp.rs receive_data (two sites): bi\n[…]\nancel=false → Continue\n- MAX_DIVERT_ITERATIONS constant bounds check\n- validate_mptcp probes kernel (Ok or Unsupported on Linux,\n Unsupported elsewhere)\n- wrap_mptcp_error wraps EINVAL as Unsupported",
"is_bot": false,
"headline": "fix: cancel-sender-drop busy-loops and MPTCP validation (LAN-170)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T19:07:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9df90d30cb7437a4a97fc7b7dae7617e773e2d5f",
"body": "fix: pause-aware duration clock in senders and server stats (LAN-230)",
"is_bot": false,
"headline": "Merge pull request #133 from lance0/lan-230",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-06T19:03:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80cf39ba78a7caa7fadd394852274b60a376474d",
"body": null,
"is_bot": false,
"headline": "fix(pause): exclude paused time from control clocks",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T18:59:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba101c941bde5105132b5e5fbab1f0a168719f22",
"body": "When a test is paused, the duration clock kept ticking. All data-plane\nsender tasks (TCP send_data/send_data_half, QUIC send_quic_data, UDP\nsend_udp_paced/send_udp_unlimited) computed deadline = start + duration\nusing wall-clock time that did not account for paused intervals. The\nserver stats loops \n[…]\ngression test: wait_while_paused_timed_returns_pause_duration verifies\nthe helper returns the correct pause duration.\n\n389 tests pass (258 lib + 42 + 67 integration + 20 + 2).\nclippy clean, fmt clean.",
"is_bot": false,
"headline": "fix: pause-aware duration clock in senders and server stats (LAN-230)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T18:55:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f4f12e1a3944e54e4e0dbbbced217af9933080f9",
"body": "fix: control-stream desync via dedicated reader task (LAN-229)",
"is_bot": false,
"headline": "Merge pull request #132 from lance0/lan-229",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-06T18:54:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7cc6191b87bc46870828b0088cb6943672a55b81",
"body": "ci: make MPTCP skip explicit and visible on standard runners (LAN-174)",
"is_bot": false,
"headline": "Merge pull request #134 from lance0/lan-174",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-06T18:52:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a222dcf6924a7aed1fa9727ae718f7c2e362f3db",
"body": "fix: dual-stack V6ONLY inconsistency and DSCP dual-stack (LAN-169)",
"is_bot": false,
"headline": "Merge pull request #130 from lance0/lan-169",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-06T18:52:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46d993708f224dd36af4583d858c68fd2b67df80",
"body": null,
"is_bot": false,
"headline": "fix(net): tolerate unsupported IPv4 TOS on macOS IPv6 sockets",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T18:34:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a47bbb9a2abff9527b7d99abccfa398866eaf72",
"body": null,
"is_bot": false,
"headline": "fix(net): surface unexpected dual-stack DSCP errors",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T18:25:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58f11836d66b91b5fde07daaef8c334fa38671b3",
"body": "The MPTCP CI job exited 0 when MPTCP/netem was unavailable on standard\nrunners, silently hiding real MPTCP regressions under a passing job.\n\nFix: emit GitHub Actions ::warning:: annotations when skipping due to\nmissing kernel capability (MPTCP disabled, netem module unavailable).\nThe job still passe\n[…]\nard runners), but the\nskip is now visible in the PR check UI and job logs.\n\nRename the CI job to 'MPTCP (requires kernel MPTCP + netem)' to make\nthe runner-capability requirement explicit at a glance.",
"is_bot": false,
"headline": "ci: make MPTCP skip explicit and visible on standard runners (LAN-174)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T18:18:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7be5252f090a10bea97862fcd5c14d1152185898",
"body": "The TCP and QUIC client control loops ran read_message inside\ntokio::select! alongside cancel/pause watch channels. If a\ncancel/pause arm fired while read_message was between fill_buf\nand consume, the dropped future lost buffered bytes, desyncing\nthe control stream.\n\nFix: split ProtectedControl into\n[…]\nselect arm replaces the\n old timeout_at wrapper around read_message\n- control_handle.abort() on every loop exit path\n\n388 tests pass (257 lib + 42 + 67 integration + 20 + 2).\nclippy clean, fmt clean.",
"is_bot": false,
"headline": "fix: control-stream desync via dedicated reader task (LAN-229)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T18:11:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6db8a0f9100f74115b270834601487ac64cb953c",
"body": "#29: Centralize IPV6_V6ONLY logic\n- Add set_v6only_for_addr helper: concrete IPv6 → V6ONLY=true,\n unspecified :: → respects AddressFamily (DualStack=false, V6Only=true)\n- create_tcp_listener_on_addr now takes AddressFamily parameter\n- create_udp_socket_bound now takes AddressFamily parameter\n- crea\n[…]\nPv4 TCP\n- test_dualstack_udp_accepts_ipv4: [::] DualStack UDP receives IPv4\n- test_dscp_sets_both_on_dualstack_ipv6: getsockopt verifies both\n IPV6_TCLASS and IP_TOS are set on dual-stack IPv6 socket",
"is_bot": false,
"headline": "Fix dual-stack V6ONLY inconsistency and DSCP dual-stack (LAN-169)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T18:01:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "140aadb134f739172e0996e233a215dbb155a890",
"body": "fix: cancel/pause latency and UDP burst after resume (LAN-160 v2)",
"is_bot": false,
"headline": "Merge pull request #129 from lance0/lan-160-v2",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-06T15:47:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e227a8913e457b24776659b878657dd8435a8ef",
"body": null,
"is_bot": false,
"headline": "test(udp): fix macos paced resume test",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T15:41:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49faa0852148bcd83c4b5e65a298d07495d63891",
"body": "Split ProtectedControl into ControlReader/ControlWriter halves so a\ndedicated control-reader task can own the recv codec independently\nfrom the stats/interval loop that owns the send codec.\n\nServer-side changes (serve.rs):\n- Add ControlCommand enum and spawn_control_reader helper that owns\n the rea\n[…]\n_udp_pause_resume_no_burst: smoke test for pause/resume/cancel\n- test_udp_paced_no_burst_after_resume: unit test verifying no packet\n arrives in first 60ms after resume, then one arrives within 500ms",
"is_bot": false,
"headline": "Fix cancel/pause latency and UDP burst after resume (LAN-160 v2)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T15:16:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cccb07f3fcc4f7cd6c10ce50a143bd778a85921f",
"body": "feat: PSK sessions require AEAD-protected control channels (LAN-159)",
"is_bot": false,
"headline": "Merge pull request #126 from lance0/lan-159-protected-control",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-06T14:23:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25ed5270442c161dee1a3e43af418469e5acf88b",
"body": "ProtectedControl::write_message split each plaintext control message into\ntwo writes (payload, then a lone \"\\n\"), so under TCP_NODELAY each message\nwent out as two segments. On a saturated, lossy link the trailing 1-byte\nnewline of the final Result frame could be stranded when the server tore\ndown, \n[…]\nreported \"Connection closed without result\" — the\ncontrol-channel skew regression test caught this. Collapse the plaintext\nbranch back to the single write used pre-LAN-159; the AEAD path is\nunchanged.",
"is_bot": false,
"headline": "fix(control-crypto): write plaintext control frames in a single write",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T14:16:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2ffd721ae6a117e92512c9edba66393ab78c6788",
"body": "When PSK authentication is configured, the control channel is now\nencrypted with ChaCha20-Poly1305 AEAD after the handshake. Separate\nc2s/s2c keys are derived from the PSK and both peers' nonces via\nHKDF-SHA256. The server sends a transcript proof (server_proof) in\nAuthSuccess binding the exact wire\n[…]\notocol changes: client_nonce field on Hello, server_proof field on\nAuthSuccess, protected_control_v1 in SUPPORTED_CAPABILITIES.\n\nWired into all handshake sites: TCP and QUIC on both client and server.",
"is_bot": false,
"headline": "feat: PSK sessions require AEAD-protected control channels (LAN-159)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-06T13:41:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a65b2520ee50b010cff6f4d7bb5b6e9f11b909ab",
"body": "… (#124)\n\n* fix(pause): treat closed pause channel as non-paused (LAN-161)\n\n\\n\\nAdds pause::is_paused and guards the pause.changed() select arms so a dropped pause sender cannot spin the send/receive loops or bypass pacing sleeps/tickers.\n\n* fix(client, pause): address review feedback on cleanup and\n[…]\nrved) while the sender is alive; only `Err(Closed)` means the channel is gone.\n\n* comment: clarify iter_mut() preserves handles for abort on timeout\n\n---------\n\nCo-authored-by: Lance <lance@lance.dev>",
"is_bot": false,
"headline": "fix: LAN-161 pause channel closure busy-loop and unawaited QUIC tasks…",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-06T12:40:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2a9bb20eb535f1330d1f3b494698a4a24428b320",
"body": null,
"is_bot": false,
"headline": "fix: address post-release review regressions (#123)",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-02T20:09:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d732e233fd477feb72849314bf8950c6c09742de",
"body": null,
"is_bot": false,
"headline": "ci: skip markdown-only changes",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T18:06:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "511bdb7f7697c5df01e643db0cc6188513e5c837",
"body": null,
"is_bot": false,
"headline": "docs: align roadmap and changelog with current work",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T18:02:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dad7b894093e998ea0a98797a78d0efe572b811e",
"body": null,
"is_bot": false,
"headline": "chore: ignore local review marker",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T17:57:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d40f9e00ff97c3b87308200e4c0dc30cfd9a55bd",
"body": "…s-0543a7c382\n\nBump the rust-dependencies group across 1 directory with 6 updates",
"is_bot": false,
"headline": "Merge pull request #112 from lance0/dependabot/cargo/rust-dependencie…",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T17:53:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5e4c08c9a651f951afb7e6748dd169d055a31b2",
"body": "…/cache-6\n\nBump actions/cache from 5 to 6",
"is_bot": false,
"headline": "Merge pull request #111 from lance0/dependabot/github_actions/actions…",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T17:53:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3211583cd030541399e6d4ef9ef297775bbb2ddf",
"body": "…/checkout-7\n\nBump actions/checkout from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #109 from lance0/dependabot/github_actions/actions…",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T17:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4470ea481c9990e73781dcbdc2da157bbd2d1bb5",
"body": "chore(tests): clean stale rate-limit timeout comment",
"is_bot": false,
"headline": "Merge pull request #122 from lance0/fix/misc-low-risk-cleanups",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T17:49:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af558e70fbfc6e4bbc2cd52455f3445fb42baad1",
"body": "fix(protocol,tcp): harden version and receive teardown",
"is_bot": false,
"headline": "Merge pull request #121 from lance0/fix/tcp-version-compat",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T17:49:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dc67f316334e7bfa5bfa1034c8ea0b64e6dea2f",
"body": "The test now requires an explicit Ok(Err(_)) for the rejected connection; remove the outdated note that allowed an outer timeout.",
"is_bot": false,
"headline": "test(integration): clean up stale rate-limit timeout comment",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T17:43:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bd5f1731b4c3390720df9db1add445d58676746",
"body": null,
"is_bot": false,
"headline": "fix(protocol,tcp): harden version and receive teardown",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T17:35:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32de0fcb7955be10685db98e99b19eab0800454a",
"body": "fix(misc): LAN-172 low-risk cleanups batch",
"is_bot": false,
"headline": "Merge pull request #120 from lance0/fix/misc-low-risk-cleanups",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T17:30:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7c6dc6276de9dd4111848a0cd86e35df83f1851",
"body": "- Suppress --no-default-features dead-code warning for discovery fallback register_server stub.\n\n- Strengthen integration test_rate_limit to assert the second concurrent connection is rejected and abort the first client to avoid long waits.\n\n- Distinguish unset -t/--time from the 10s default so expl\n[…]\ne MTU probe size_ladder compute the family-aware max payload from 9216-byte jumbo minus IP overhead so IPv6 uses 9168 instead of 9188.\n\n- Add unit tests for duration resolution and IPv6 ladder bounds.",
"is_bot": false,
"headline": "fix(misc): LAN-172 low-risk cleanups batch",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T17:26:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57a8de507ab847b75dbfc50429d9d8a7ab08534b",
"body": "fix(tui,config,main): LAN-163 + LAN-173 TUI/preset polish",
"is_bot": false,
"headline": "Merge pull request #119 from lance0/fix/tui-preset-polish",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T17:19:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b6d7bf434c7044b221cbf7edaf4dd29b8fffa9b",
"body": "- Count zero-throughput intervals in the live TUI average speed.\n\n- Keep retransmit fallback cumulative by accumulating per-stream interval deltas.\n\n- Apply preset max_duration_secs when --max-duration is not supplied.\n\n- Document bandwidth_limit as reserved/unused in config structs, sample, and docs.\n\n- Add unit tests for average speed, retransmit fallback, preset max_duration, and config parsing.",
"is_bot": false,
"headline": "fix(tui,config,main): LAN-163 + LAN-173 TUI/preset polish",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T17:14:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "316a076f5789825fdf6d32540d90234073dcb1d3",
"body": "fix(protocol,probe,net): LAN-167 + LAN-168 protocol/probe validation",
"is_bot": false,
"headline": "Merge pull request #118 from lance0/fix/protocol-probe-validation",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T17:10:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d494f34000486471b73c1c22781421d758ee64e7",
"body": "- Reject TestAck messages that contain both udp_token and data_ports.\n\n- Validate padded probe packets: declared_size must be >= header and <= datagram length; acks may still carry larger declared_size.\n\n- Count echo receipt as forward-path success and stop waiting once the echo arrives.\n\n- Wrap literal IPv6 addresses in brackets in resolve_host.\n\n- Add regression tests for each fix.",
"is_bot": false,
"headline": "fix(protocol,probe,net): LAN-167 + LAN-168 protocol/probe validation",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T17:09:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f820fd47a6ff046ad78317afbf9bf41411f6a6d0",
"body": "fix(auth,serve,cli): LAN-158 + LAN-171 security hardening",
"is_bot": false,
"headline": "Merge pull request #117 from lance0/fix/security-hardening-batch",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T16:59:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3c88d549577528fc7a0200aa34a7a54d2f75417",
"body": "- Add --preset server arg; enforce ServerPreset.allowed_clients as an additional AND ACL at TCP and QUIC accept time.\n\n- Harden constant_time_eq to avoid length-mismatch short-circuit and trailing-zero false positives.\n\n- Reject PSK files with group/other access on Unix.\n\n- Warn users that --psk and XFR_PSK leak through process metadata; update --psk help text on both client and server.\n\n- Add regression tests for preset allow/deny and PSK file permissions/constant-time comparison.",
"is_bot": false,
"headline": "fix(auth,serve,cli): LAN-158 and LAN-171 security hardening",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T16:55:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aed6e55f05f48b721546e2f0a4c6b534ad869a68",
"body": "fix(output,ci,install): harden output and release paths",
"is_bot": false,
"headline": "Merge pull request #116 from lance0/fix/harden-output-and-release",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T16:43:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9367ec13a2974a17c9614557e9afc7739f822b68",
"body": "- PushGatewayClient::new now returns anyhow::Result and surfaces\n reqwest builder errors instead of falling back to a default client via\n unwrap_or_default(), which silently dropped the 30s timeout.\n- output_json() and output_interval_json() now return anyhow::Result;\n callers propagate/log seria\n[…]\n/*.tar.gz already covers it after the move step).\n- install.sh now directs Intel macOS (x86_64) users to 'cargo install xfr'\n instead of attempting to download a removed artifact.\n\n(LAN-156, LAN-157)",
"is_bot": false,
"headline": "fix(output,ci,install): harden output and release paths",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T16:23:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "51e5323c7ed0b0a80c0d0dfa8004407c33fca7c3",
"body": "fix(server,stats,diff): aggregate final TCP info, round RTT averages, flag zero-baseline regressions",
"is_bot": false,
"headline": "Merge pull request #115 from lance0/fix/result-stats-correctness",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T16:16:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d59fd8a4268360ad2fee358fc617ea6664e6af90",
"body": "… flag zero-baseline regressions\n\n- Server final TestResult.tcp_info now aggregates per-stream final\n TcpInfoSnapshot snapshots via TestStats::final_local_tcp_info() instead of\n returning only the last-pushed snapshot.\n- Fix fractional RTT averaging in poll_local_tcp_info() and\n final_local_tcp_i\n[…]\nthose changes in is_regression, so regressions are flagged\n instead of reported as 0.0% / OK.\n- Add unit tests for multi-stream aggregation, fractional averages, and\n zero-baseline diff regressions.",
"is_bot": false,
"headline": "fix(server,stats,diff): aggregate final TCP info, round RTT averages,…",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T16:13:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "901d33ccd8ee735978a0773317068f5f71c5f9d5",
"body": "fix(server): clean up active test entry and metrics on abort/cancel/error",
"is_bot": false,
"headline": "Merge pull request #114 from lance0/fix/cleanup-active-tests-on-abort-v2",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T16:00:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b35c7bc02980805b40eb816435f4357d2790f03c",
"body": "…rror/cancel",
"is_bot": false,
"headline": "fix(server): always clean up active_tests entry and metrics on test e…",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T15:57:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4523f040d2f848299693f2b576bfcfc6072e0165",
"body": "…n test error/cancel\"\n\nThis reverts commit 030a308f7d2c8ebf6044a99308fd1d9f368f6f30.",
"is_bot": false,
"headline": "Revert \"fix(server): always clean up active_tests entry and metrics o…",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T15:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "030a308f7d2c8ebf6044a99308fd1d9f368f6f30",
"body": "…rror/cancel",
"is_bot": false,
"headline": "fix(server): always clean up active_tests entry and metrics on test e…",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T15:51:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77e325440301db8883155246682d399656a0ab1a",
"body": "fix(tcp): resume partial regular writes and zero-copy sends from correct offset",
"is_bot": false,
"headline": "Merge pull request #113 from lance0/fix/tcp-integrity-and-server-leak",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-07-01T15:44:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8565992ede44eb0ec9122e607a655eb1ba83285c",
"body": null,
"is_bot": false,
"headline": "refactor(zerocopy): make send_chunk one-shot and caller-owned offset",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T15:41:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4fc2f1332d482c30f047d0a040da1138695b05d",
"body": "…ect offset",
"is_bot": false,
"headline": "fix(tcp): resume partial regular writes and zero-copy sends from corr…",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-07-01T15:35:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6edd9cd6465ee730c8616fcd5585d4bbbc8faced",
"body": "Bumps the rust-dependencies group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [ratatui](https://github.com/ratatui/ratatui) | `0.30.1` | `0.30.2` |\n| [mdns-sd](https://github.com/keepsimple1/mdns-sd) | `0.20.0` | `0.20.1` |\n| [anyhow](https://github.com/dtolnay/\n[…]\npendency-version: 0.23.41\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: rust-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump the rust-dependencies group across 1 directory with 6 updates",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-28T05:54:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b7cb481cf2fac586b8f1338140033f25e2b8773b",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/cache from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-28T05:52:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f74e23e273c7815c712747c415e39d7c9ea3ea4",
"body": null,
"is_bot": false,
"headline": "Bump version to v0.9.20",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-06-23T12:54:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "639bb409b35f723d3790385008a0c38a3d38ead6",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-21T05:52:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "519b16f528058984d35d0b2f359b48996b626462",
"body": "Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5 to 6.\n- [Release notes](https://github.com/docker/metadata-action/releases)\n- [Commits](https://github.com/docker/metadata-action/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: docker/metadata-action\n d\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump docker/metadata-action from 5 to 6 (#107)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-16T13:48:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7bd4ce85712bc7eb4bfb5abaed8381e302fc3294",
"body": "Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6 to 7.\n- [Release notes](https://github.com/docker/build-push-action/releases)\n- [Commits](https://github.com/docker/build-push-action/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: docker/build-push-\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump docker/build-push-action from 6 to 7 (#106)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-16T13:48:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c2d6e15e8119824c7267588b1379b3882eb0192",
"body": "Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3 to 4.\n- [Release notes](https://github.com/docker/setup-qemu-action/releases)\n- [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: docker/setup-qemu-\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump docker/setup-qemu-action from 3 to 4 (#105)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-16T13:48:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "05fadedea33ff7772fe6633244dc93fff3937be7",
"body": "Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: docker/login-action\n dependency-versi\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump docker/login-action from 3 to 4 (#104)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-16T13:48:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0df31cb149cdd10c69a6067259361f929f5df947",
"body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)\n\n---\nupdated-dependencies:\n- dependency-name: docker/set\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Bump docker/setup-buildx-action from 3 to 4 (#103)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-16T13:47:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bb12209dccced112440c2175774bec1cb55fb9ff",
"body": null,
"is_bot": false,
"headline": "Bump version to v0.9.19",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-06-14T15:03:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca219f7ea8fa51bc25aeed67d0b3502dafed6043",
"body": "Add safe TUI restart controls",
"is_bot": false,
"headline": "Merge pull request #108 from lance0/feature-100-tui-restart-clean",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-06-14T15:00:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7181039f6c757205a9951b94834c4c0037ac926f",
"body": "Add a restartable TUI client run lifecycle so the r key and Settings -> Test Apply & Restart cancel and drain the current run before spawning a replacement.\n\nSettings restarts now apply stream count, protocol, duration, direction, and bitrate; QUIC-incompatible knobs are surfaced in the TUI history.\n[…]\nestStart/TestResult fields so all-targets clippy stays green.\n\nBased on the TUI restart/settings contribution in #101/#102 by @flotpg.\n\nCo-authored-by: Florian Obradovic <floriano@theprojectgroup.com>",
"is_bot": false,
"headline": "Add safe TUI restart controls",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-06-14T14:55:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "66032f98cc5b9fec31355bd270251aee7bcf41b4",
"body": null,
"is_bot": false,
"headline": "Bump version to v0.9.18",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-06-11T19:35:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29c7173a3373e37d1036f952685398c27614629c",
"body": "PR #96 shipped without doc updates, leaving README, SCRIPTING.md,\nCOMPARISON.md, and FEATURES.md describing UDP as using ephemeral\nserver ports. All four now describe single-port UDP (with the\nfallback story for old peers and non-SO_REUSEPORT platforms).\n\nThe man page was three releases stale (0.9.14): adds --no-zerocopy,\n--probe-mtu, --connect-timeout, corrects -Z to default-on semantics,\nand documents the zerocopy_v1 / mtu_probe_v1 / single_port_udp_v1\ncapabilities.",
"is_bot": false,
"headline": "Docs: catch user-facing docs up to single-port UDP and recent flags",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-06-11T19:30:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d81689b0a7ad8653477c074869ea4b7240aadd0",
"body": "The test began failing on master after the single-port UDP merge.\nBisection plus packet captures established the mechanism:\n\nThe netem profile (50mbit FIFO, limit 10000) holds ~2.2 s of queue, so\neven a correctly-NODELAY'd control channel queues interval segments\nbehind the UDP flood, tail-drops, an\n[…]\nnd annotates the\nsampler/writer-decoupling roadmap item with the wire evidence (server\ninterval emission degrades to ~2 s because the control write blocks\nand MissedTickBehavior::Skip eats the ticks).",
"is_bot": false,
"headline": "Recalibrate the control-channel skew test to target collapse, not rhythm",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-06-11T19:16:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d179f195cb77a2267637febd816e114bb86469dc",
"body": "Connect timeout, server-side client identification, CSV bidir interval\ncolumns, and tcp-nodelay propagation shipped; the QUIC parameter item\nnarrows to the remaining real fix (pacing) now that the warning half\nlanded.",
"is_bot": false,
"headline": "Roadmap: check off the polish batch (PRs #97-#99)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-06-11T18:36:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b0b0980ad1f75e6160938a6691356502663ab10",
"body": "Propagate --tcp-nodelay to the server (wire intent, no behavior change)",
"is_bot": false,
"headline": "Merge pull request #99 from lance0/tcp-nodelay-propagation",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-06-11T18:35:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d20cc3314ae610456f99069fcf1ff32b6c52da9c",
"body": "The flag previously configured only client-created sockets; in -R and\n--bidir the server is the latency-relevant bulk sender and never heard\nabout it - the same one-direction asymmetry issues #81/#91 had for\naccounting.\n\nTestStart gains a wire-additive tcp_nodelay field (serde-default,\nomitted when \n[…]\noncept), and UDP tests send false\nlike zerocopy does.\n\nThe legacy dead-code multi-port handler now references the shared\nSERVER_DATA_NODELAY constant so the historical default has one source\nof truth.",
"is_bot": false,
"headline": "Propagate --tcp-nodelay to the server via TestStart",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-06-11T18:34:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c7018de743cbf682fc969bc6280d4a93557f94b3",
"body": "Add per-direction split columns to CSV interval output",
"is_bot": false,
"headline": "Merge pull request #98 from lance0/csv-bidir-columns",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-06-11T18:33:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e98e8d5dcc51a1cbb0e96adbd203ad68071da42",
"body": "Connect timeout, QUIC ignored-flag warnings, client hello logging",
"is_bot": false,
"headline": "Merge pull request #97 from lance0/quic-warnings-and-hello-logging",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-06-11T18:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7ef5c1fe9903e74089ee28214cdd97b4f23b7a4",
"body": "Three small honesty fixes from the roadmap surface audit:\n\n--connect-timeout bounds control-connection establishment (TCP connect\nor QUIC handshake) with a clear error naming the flag. Off by default;\nwithout it a dead or filtered server is bounded only by OS defaults,\nwhich can be minutes — the fai\n[…]\nre (the features that will silently fall back that session). The\nbare 'Client connected: <addr>' line is replaced by the richer one in\nthe Hello handler; QUIC control connections get the same logging.",
"is_bot": false,
"headline": "Add --connect-timeout, QUIC ignored-flag warnings, client hello logging",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-06-11T18:27:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd9a2a70b697818980fe71a35fe7734216f5b9ab",
"body": "Bidirectional tests already expose bytes_sent/bytes_received/\nthroughput_send_mbps/throughput_recv_mbps in final JSON, the live\nAggregateInterval, and the CSV summary row -- but CSV interval rows\nonly carried the combined number, so scripted bidir consumers could\nnot see the split at all.\n\nAppend th\n[…]\nry row's existing behavior for these fields.\n\nDocs: update the SCRIPTING.md CSV section, which was also stale on\nthe summary header (missing the four columns added by #56). Mark the\nROADMAP item done.",
"is_bot": false,
"headline": "Add per-direction split columns to CSV interval output (#56 family)",
"author_name": "Lance Tuller",
"author_login": "lance0",
"committed_at": "2026-06-11T18:24:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "687d27ff3daed3fa7b0175dc66377ccd3ec0e8a5",
"body": "Single-port UDP data plane (single_port_udp_v1)",
"is_bot": false,
"headline": "Merge pull request #96 from lance0/feature-63-single-port-udp",
"author_name": "lance",
"author_login": "lance0",
"committed_at": "2026-06-11T18:17:13Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 29,
"commits_last_year": 459,
"latest_release_at": "2026-07-06T19:56:57Z",
"latest_release_tag": "v0.9.21",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 18,
"days_since_latest_release": 16,
"mean_days_between_releases": 7.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 71,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "xfr",
"exists": true,
"license": "MIT OR Apache-2.0",
"keywords": [
"network",
"tui",
"benchmark",
"bandwidth",
"iperf",
"command-line-utilities",
"network-programming"
],
"ecosystem": "crates",
"matches_repo": true,
"registry_url": "https://crates.io/crates/xfr",
"is_deprecated": false,
"latest_version": "0.9.21",
"repository_url": "https://github.com/lance0/xfr",
"versions_count": 34,
"total_downloads": 1328,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 179,
"first_published_at": "2026-02-01T00:06:23.250314Z",
"latest_published_at": "2026-07-06T19:58:56.205456Z",
"latest_version_yanked": false,
"days_since_latest_publish": 16
}
]
},
"popularity": {
"forks": 21,
"stars": 517,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-02-04",
"count": 6
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-02-07",
"count": 2
},
{
"date": "2026-02-11",
"count": 1
},
{
"date": "2026-02-27",
"count": 1
},
{
"date": "2026-03-11",
"count": 1
},
{
"date": "2026-03-15",
"count": 1
},
{
"date": "2026-04-21",
"count": 2
},
{
"date": "2026-04-24",
"count": 1
},
{
"date": "2026-05-05",
"count": 1
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-12",
"count": 1
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-30",
"count": 1
}
],
"complete": true,
"collected": 21,
"total_forks": 21
},
"star_history": null,
"open_issues_and_prs": 4
},
"ai_readiness": {
"has_nix": true,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"Cargo.toml"
],
"largest_source_bytes": 154793,
"source_files_sampled": 40,
"oversized_source_files": 8,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "tokio",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "futures",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.3"
},
{
"name": "ratatui",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.30"
},
{
"name": "crossterm",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.29"
},
{
"name": "clap",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "4"
},
{
"name": "clap_complete",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "4.6"
},
{
"name": "serde",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "serde_json",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "prometheus",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.14"
},
{
"name": "hyper",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "hyper-util",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.1"
},
{
"name": "http-body-util",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.1"
},
{
"name": "mdns-sd",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.20"
},
{
"name": "toml",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1.1"
},
{
"name": "dirs",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "6"
},
{
"name": "async-trait",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.1"
},
{
"name": "anyhow",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "tracing",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.1"
},
{
"name": "tracing-subscriber",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.3"
},
{
"name": "tracing-appender",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.2"
},
{
"name": "parking_lot",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.12"
},
{
"name": "humantime",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "2"
},
{
"name": "uuid",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "hostname",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.4"
},
{
"name": "once_cell",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "chrono",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.4"
},
{
"name": "reqwest",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.12"
},
{
"name": "quinn",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.11"
},
{
"name": "rustls",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.23"
},
{
"name": "rcgen",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.14"
},
{
"name": "hmac",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.13"
},
{
"name": "sha2",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.11"
},
{
"name": "rand",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.10"
},
{
"name": "sha2_010",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.10"
},
{
"name": "hmac_012",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.12"
},
{
"name": "chacha20poly1305",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.10"
},
{
"name": "hkdf",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.12"
},
{
"name": "dashmap",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "6"
},
{
"name": "ipnetwork",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.21"
},
{
"name": "update-informer",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "1"
},
{
"name": "socket2",
"manifest": "Cargo.toml",
"ecosystem": "crates",
"version_constraint": "0.6"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 77,
"open_issues": 3,
"closed_ratio": 0.93,
"closed_issues": 40,
"closed_unmerged_prs": 24
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "lance0",
"commits": 438,
"avatar_url": "https://avatars.githubusercontent.com/u/3323861?v=4"
},
{
"type": "User",
"login": "deephack1982",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/6213936?v=4"
},
{
"type": "User",
"login": "matttbe",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/768677?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.993
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"audit.yml",
"ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"Cargo.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/15 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ec39ea55ae7e0fc08984ddcedc9fc1827683ad37",
"ran_at": "2026-07-23T11:43:12Z",
"aggregate_score": 5.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-23T02:12:10Z",
"oldest_open_prs": [
{
"number": 144,
"created_at": "2026-07-19T05:56:37Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-09T20:35:03Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 33,
"created_at": "2026-03-05T18:43:26Z",
"last_comment_at": "2026-06-11T15:23:04Z",
"last_comment_author": "lance0"
},
{
"number": 142,
"created_at": "2026-07-14T20:52:23Z",
"last_comment_at": "2026-07-23T02:28:26Z",
"last_comment_author": "lance0"
},
{
"number": 143,
"created_at": "2026-07-15T15:07:00Z",
"last_comment_at": "2026-07-23T02:27:48Z",
"last_comment_author": "lance0"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/lance0/xfr",
"host": "github.com",
"name": "xfr",
"owner": "lance0"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"security": 52,
"vitality": 82,
"community": 56,
"governance": 58,
"engineering": 90
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 82,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 459,
"human_commit_share": 0.92,
"days_since_last_push": 4,
"active_weeks_last_year": 18
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "18/52 weeks with commits",
"points": 12.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 18
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "459 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 459
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 29,
"latest_release_tag": "v0.9.21",
"releases_from_tags": false,
"days_since_latest_release": 16,
"mean_days_between_releases": 7.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "29 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 29
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 16 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 16
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~7.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 7.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 56,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"forks": 21,
"stars": 517,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "517 stars",
"points": 44,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 517
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "21 forks",
"points": 10.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 21
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "at_risk",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"packages": [
"xfr"
],
"dependents": null,
"ecosystems": "crates",
"total_downloads": 1328,
"monthly_downloads": 179
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "179 downloads/month across crates",
"points": 30.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 179,
"ecosystems": "crates"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 58,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.993
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"merged_prs": 77,
"open_issues": 3,
"closed_issues": 40,
"issue_closed_ratio": 0.93,
"closed_unmerged_prs": 24
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "93% of issues closed",
"points": 43.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 93
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "77/101 decided PRs merged",
"points": 29.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 77,
"decided": 101
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/15 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"followers": 115,
"owner_type": "User",
"is_verified": null,
"owner_login": "lance0",
"public_repos": 61,
"account_age_days": 4931
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "115 followers of lance0",
"points": 14.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 115,
"login": "lance0"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "61 public repos, account ~13 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 61
}
},
{
"code": "account_age_years",
"params": {
"years": 13
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"xfr"
],
"ecosystems": "crates",
"any_deprecated": false,
"min_days_since_publish": 16
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on crates",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "crates"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 16 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 16
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "34 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 34
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 90,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 16,
"status": "met",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"bandwidth",
"benchmark",
"cli",
"iperf",
"network",
"rust",
"tui"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "7 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 7
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 52,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 5.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/15 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 61,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.957,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "88 of 92 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 88,
"sampled": 92
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"has_nix": true,
"has_tests": true,
"lockfiles": [
"Cargo.lock"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"Cargo.toml"
],
"dependency_bot_commit_share": 0.08
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Cargo.toml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "Cargo.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 11,
"status": "met",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Rust (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, Nix, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, Nix, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "8 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 8,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 89,
"inputs": {
"primary_language": "Rust",
"largest_source_bytes": 154793,
"source_files_sampled": 40,
"oversized_source_files": 8
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Rust (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Rust"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "8/40 source files over 60KB",
"points": 44,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 40,
"oversized": 8
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-23T11:43:29.300914Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/l/lance0/xfr.svg",
"full_name": "lance0/xfr",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з lance0/xfr. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.
