Публічний реєстрКритичний
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-25 12:27 UTC
pgaskin / cmus
Fork of cmus/cmus for development, packaging, and testing PRs. For Fedora packages, see pgaskin/rpms.
pgaskin/cmus має індекс здоров’я 17 зі 100, що відповідає смузі «Критичний». Найвищий показник — Vitality (51/100), найнижчий — Community & Adoption (14/100). Останнє оновлення було 3 дні тому. Більшість нещодавньої роботи виконують 3 учасники.
17
загалом / 100Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
17
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Політика юрисдикцій високого ризику застосовує множник 50% до зваженого загального індексу здоров’я і встановлює для нього межу «У зоні ризику» на рівні 49.
Власність
Patrick GaskinОсобистий обліковий запис
291 підписник99 публічних репозиторіївз серп. 2015 р.
Цей репозиторій належить особистому обліковому запису. Проєкт з єдиним власником несе більший ризик безперервності, ніж підтримуваний організацією.
Метрики за категоріями
Життєздатність
Чи живий проєкт — чи пишеться код і чи виходять релізи?
51
Активність розробки
64Помірний
Як обчислюється оцінка
| 36/36 | Свіжість push — останній push 3 дн. тому |
| 13.2/36 | Ритм комітів — 19/52 тижнів із комітами |
| 14.5/18 | Обсяг комітів — 40 комітів за останній рік |
| 0/10 | OpenSSF Scorecard: Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
Використані вхідні дані
| commits_last_year | 40 |
| human_commit_share | 1 |
| days_since_last_push | 3 |
| active_weeks_last_year | 19 |
Дисципліна релізів
32У зоні ризику
Як обчислюється оцінка
| 16.2/27 | Випускає релізи — 52 тегів версій (без релізів GitHub) |
| 0/36 | Свіжість релізів — останній реліз 2 734 дн. тому |
| 12.6/27 | Ритм релізів — реліз кожні ~252,7 дн. |
| 0/10 | OpenSSF Scorecard: Signed-Releases — немає даних |
Використані вхідні дані
| releases_count | 52 |
| latest_release_tag | v2.8.0 |
| releases_from_tags | так |
| days_since_latest_release | 2 734 |
| mean_days_between_releases | 252,7 |
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.
Спільнота та впровадження
Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?
14
Популярність і впровадження
5Критичний
Як обчислюється оцінка
| 4.9/60 | Зірки — 3 зірок |
| 0/25 | Форки — 1 форків |
| 0/15 | Спостерігачі — 1 спостерігачів |
Використані вхідні дані
| forks | 1 |
| stars | 3 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Здоров'я спільноти
25Критичний
Як обчислюється оцінка
| 0/22.5 | README |
| 22.5/22.5 | Ліцензія — визнана ліцензія (GPL-2.0) |
| 0/18 | Настанови CONTRIBUTING |
| 0/13.5 | Кодекс поведінки |
| 0/7.2 | Шаблон issue |
| 0/6.3 | Шаблон PR |
Використані вхідні дані
| has_readme | ні |
| has_license | ні |
| has_contributing | ні |
| has_issue_template | ні |
| has_code_of_conduct | ні |
| has_pull_request_template | ні |
Сталість та врядування
Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?
49
Як обчислюється оцінка
| 36/54 | Бас-фактор — на 3 контриб’ютор(ів) припадає половина всіх комітів |
| 15.6/22.5 | Розподіл комітів — головний контриб’ютор — автор 30% комітів |
| 13.5/13.5 | Широта контриб’юторів — 100 контриб’юторів |
| 10/10 | OpenSSF Scorecard: Contributors — project has 16 contributing companies or organizations |
Використані вхідні дані
| bus_factor | 3 |
| contributors_sampled | 100 |
| top_contributor_share | 0,305 |
Реактивність на issue та PR
1Критичний
Як обчислюється оцінка
| 0/46.8 | Вирішення issue — немає issue або даних |
| 0/38.3 | Прийняття PR — немає вирішених pull request-ів або даних |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Використані вхідні дані
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Виключено з оцінювання (немає даних або не застосовно): Вирішення issue, Прийняття PR. Залишкові ваги перенормовано.
Власність та опіка
66Помірний
Як обчислюється оцінка
| 10/30 | Підтримка власника — особистий (користувацький) обліковий запис |
| 0/20 | Верифікований домен — не застосовно до користувацьких облікових записів |
| 17.7/25 | Охоплення власника — 291 підписників у pgaskin |
| 25/25 | Послужний список — 99 публічних репозиторіїв, вік облікового запису ~10 р. |
Використані вхідні дані
| followers | 291 |
| owner_type | User |
| is_verified | — |
| owner_login | pgaskin |
| public_repos | 99 |
| account_age_days | 3 990 |
Виключено з оцінювання (немає даних або не застосовно): Верифікований домен. Залишкові ваги перенормовано.
Інженерна якість
Чи наявні базові інженерні практики та документація?
32
Інженерні практики
30У зоні ризику
Як обчислюється оцінка
| 24/24 | Процеси CI — 1 процес(ів) CI |
| 0/24 | Наявні тести |
| 0/16 | Конфігурація лінтера |
| 0/9.6 | Pre-commit-хуки |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — немає даних |
Використані вхідні дані
| has_ci | так |
| has_tests | ні |
| has_editorconfig | ні |
| has_linter_config | ні |
| has_precommit_config | ні |
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: CI-Tests. Залишкові ваги перенормовано.
Документація
35У зоні ризику
Як обчислюється оцінка
| 0/30 | README |
| 25/25 | Каталог документації |
| 0/15 | Сайт документації / домашня сторінка |
| 0/10 | Опис репозиторію |
| 10/10 | Теми — 4 тем |
| 0/10 | Wiki |
Використані вхідні дані
| topics | cmus, package, experimental, no-delete-fork |
| has_wiki | ні |
| homepage | — |
| has_readme | ні |
| has_docs_dir | так |
| has_description | ні |
Безпека
Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?
16
Стан безпеки
16Критичний
Попередження про юрисдикційний ризик
Виявлено пов’язаність із юрисдикцією високого ризику
1 профілі ключових контриб’юторівRussiaБезпека й загальний рейтинг: межа «Під ризиком»
Сигнал ґрунтується на публічних локаціях, самостійно вказаних у профілях. Він не визначає національність, громадянство, наміри, санкційний статус чи надійність людини.
Як оцінюється юрисдикційна пов’язаністьЯк обчислюється оцінка
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — немає даних |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 16 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Ліцензія — license file detected |
| 0/7.5 | Maintained — 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| 0/5 | Packaging — немає даних |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — немає даних |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Використані вхідні дані
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3,3 |
| high_risk_jurisdiction_cap | 49 |
| high_risk_jurisdiction_multiplier | 50 |
| security_posture_after_multiplier | 16 |
| security_posture_before_jurisdiction | 33 |
Виключено з оцінювання (немає даних або не застосовно): ci_tests, packaging, signed_releases. Залишкові ваги перенормовано. Політика юрисдикцій високого ризику застосовує множник 50% і встановлює для стану безпеки межу «У зоні ризику» на рівні 49.
Готовність до ШІ
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
43
Контекст і настанови для агентів
35У зоні ризику
Як обчислюється оцінка
| 0/45 | Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора |
| 0/15 | Машиночитана документація (llms.txt) |
| 35.2/40 | Читабельна історія комітів — намір зазначено у 66 з 100 людських комітів (структурований заголовок або пояснювальний текст) |
Використані вхідні дані
| has_llms_txt | ні |
| legible_history_share | 0,66 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Як обчислюється оцінка
| 18/18 | Розгортання однією командою — Makefile |
| 0/22 | Автоматизовані тести |
| 0/11 | Конфігурація лінтера / форматера |
| 11/11 | Статична перевірка типів — C (статично типізована) |
| 0/10 | Відтворюване середовище |
| 0/10 | Підтверджена практика роботи з агентами — серед останніх 100 комітів немає створених агентом |
| 0/8 | Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Використані вхідні дані
| has_nix | ні |
| has_tests | ні |
| lockfiles | — |
| has_dockerfile | ні |
| typed_language | так |
| bootstrap_files | Makefile |
| has_devcontainer | ні |
| has_linter_config | ні |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Читабельність коду для моделей
99Відмінний
Як обчислюється оцінка
| 45/45 | Типізований код — C (статично типізована) |
| 54.4/55 | Керовані розміри файлів — 2/172 файлів вихідного коду понад 60 КБ |
Використані вхідні дані
| primary_language | C |
| largest_source_bytes | 67 658 |
| source_files_sampled | 172 |
| oversized_source_files | 2 |
Ключові факти
3зірок GitHub
100контриб'юторів
40комітів за останні 12 місяців
3днів від останнього пушу
52релізів
3бас-фактор
0відкритих issue
—пакетних екосистем
Попередження щодо збору даних
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- Community profile unavailable
Докладніше
OpenSSF Scorecard 3.3 / 10
3.3сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| н/д | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 16 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 |
| н/д | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| н/д | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Усі залежності 0
Повний розв'язаний набір залежностей із графа залежностей GitHub: 0 прямих і 0 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.
| Реєстр | Пакет | Версія | Зв'язок |
|---|
Сповіщення про залежності не оцінено
Звірка сповіщень не відбулася для цього звіту: No resolved dependencies to assess
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"cmus",
"package",
"experimental",
"no-delete-fork"
],
"is_fork": true,
"size_kb": 6839,
"has_wiki": false,
"homepage": null,
"languages": {
"C": 1297168,
"Shell": 32763,
"Python": 6168,
"Makefile": 12260
},
"pushed_at": "2026-07-21T22:13:58Z",
"created_at": "2019-02-10T17:05:15Z",
"owner_type": "User",
"updated_at": "2026-05-03T03:36:16Z",
"description": "Fork of cmus/cmus for development, packaging, and testing PRs. For Fedora packages, see pgaskin/rpms.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "GPL-2.0",
"default_branch": "exp",
"license_spdx_raw": "GPL-2.0",
"primary_language": "C",
"significant_languages": [
"C"
]
},
"owner": {
"blog": "https://pgaskin.net",
"name": "Patrick Gaskin",
"type": "User",
"login": "pgaskin",
"company": null,
"location": "Ottawa, Canada",
"followers": 291,
"avatar_url": "https://avatars.githubusercontent.com/u/13909717?v=4",
"created_at": "2015-08-21T21:08:51Z",
"is_verified": null,
"public_repos": 99,
"account_age_days": 3990
},
"license": {
"state": "standard",
"spdx_id": "GPL-2.0",
"raw_spdx": "GPL-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v2.8.0",
"kind": "minor",
"published_at": "2019-01-29T09:09:08Z"
},
{
"tag": "v2.8.0-rc0",
"kind": "prerelease",
"published_at": "2016-11-20T12:29:46Z"
},
{
"tag": "v2.7.1",
"kind": "patch",
"published_at": "2015-07-13T10:00:56Z"
},
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2015-06-29T09:56:08Z"
},
{
"tag": "v2.6.2",
"kind": "patch",
"published_at": "2015-06-29T10:48:03Z"
},
{
"tag": "v2.6.1",
"kind": "patch",
"published_at": "2015-06-29T10:11:39Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2014-08-11T07:48:28Z"
},
{
"tag": "v2.6.0-rc0",
"kind": "prerelease",
"published_at": "2014-05-14T07:59:42Z"
},
{
"tag": "v2.5.1",
"kind": "patch",
"published_at": "2014-05-14T09:50:55Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2012-11-07T08:46:17Z"
},
{
"tag": "v2.4.3",
"kind": "patch",
"published_at": "2011-11-30T08:57:20Z"
},
{
"tag": "v2.4.2",
"kind": "patch",
"published_at": "2011-07-24T09:42:22Z"
},
{
"tag": "v2.4.1",
"kind": "patch",
"published_at": "2011-05-26T18:47:33Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2011-04-23T20:35:36Z"
},
{
"tag": "v2.4.0-rc0",
"kind": "prerelease",
"published_at": "2011-04-10T12:17:40Z"
},
{
"tag": "v2.3.5",
"kind": "patch",
"published_at": "2011-04-10T11:30:07Z"
},
{
"tag": "v2.3.4",
"kind": "patch",
"published_at": "2011-02-10T16:23:55Z"
},
{
"tag": "v2.3.3",
"kind": "patch",
"published_at": "2010-06-17T16:34:29Z"
},
{
"tag": "v2.3.2",
"kind": "patch",
"published_at": "2010-04-15T14:48:36Z"
},
{
"tag": "v2.3.1",
"kind": "patch",
"published_at": "2010-03-13T20:46:52Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2010-03-02T15:37:18Z"
},
{
"tag": "v2.3.0-rc1",
"kind": "prerelease",
"published_at": "2010-02-22T13:33:56Z"
},
{
"tag": "v2.3.0-rc0",
"kind": "prerelease",
"published_at": "2010-02-14T20:20:01Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2007-07-27T14:45:56Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2006-12-21T18:03:31Z"
},
{
"tag": "v2.0.4",
"kind": "patch",
"published_at": "2006-08-20T12:23:08Z"
},
{
"tag": "v2.0.3",
"kind": "patch",
"published_at": "2006-06-18T13:52:26Z"
},
{
"tag": "v2.0.2",
"kind": "patch",
"published_at": "2006-04-20T15:43:40Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2006-04-20T11:17:26Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2006-02-23T18:59:28Z"
},
{
"tag": "v1.6.8",
"kind": "patch",
"published_at": "2006-01-11T16:43:07Z"
},
{
"tag": "v1.6.7",
"kind": "patch",
"published_at": "2006-01-02T17:14:51Z"
},
{
"tag": "v1.6.6",
"kind": "patch",
"published_at": "2006-01-01T13:29:06Z"
},
{
"tag": "v1.6.5",
"kind": "patch",
"published_at": "2005-12-05T16:36:15Z"
},
{
"tag": "v1.6.4",
"kind": "patch",
"published_at": "2005-11-18T16:44:26Z"
},
{
"tag": "v1.6.3",
"kind": "patch",
"published_at": "2005-11-03T22:50:15Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2005-10-21T18:19:49Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2005-10-15T18:03:14Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2005-10-13T17:22:54Z"
},
{
"tag": "v1.5.8",
"kind": "patch",
"published_at": "2005-09-28T14:44:36Z"
},
{
"tag": "v1.5.7",
"kind": "patch",
"published_at": "2005-09-20T12:06:24Z"
},
{
"tag": "v1.5.6",
"kind": "patch",
"published_at": "2005-09-01T17:30:37Z"
},
{
"tag": "v1.5.5",
"kind": "patch",
"published_at": "2005-08-24T13:54:50Z"
},
{
"tag": "v1.5.4",
"kind": "patch",
"published_at": "2005-08-20T15:36:12Z"
},
{
"tag": "v1.5.3",
"kind": "patch",
"published_at": "2005-08-17T19:17:25Z"
},
{
"tag": "v1.5.2",
"kind": "patch",
"published_at": "2005-08-02T13:32:34Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2005-07-13T15:33:54Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2005-07-01T13:01:32Z"
},
{
"tag": "v1.4.6",
"kind": "patch",
"published_at": "2005-06-18T21:28:35Z"
},
{
"tag": "v1.4.5",
"kind": "patch",
"published_at": "2005-06-11T16:09:35Z"
},
{
"tag": "v1.4.4",
"kind": "patch",
"published_at": "2005-06-07T16:14:24Z"
},
{
"tag": "v1.4.3",
"kind": "patch",
"published_at": "2005-06-07T13:46:44Z"
}
],
"recent_commits": [
{
"oid": "a6b82eb2e38e24f8a7ceda5a2e0b191480513944",
"body": "* cmus/master (cmus/cmus@d335e90abd5d000eef128debcb979d852f0f6b7f)\n* gavtroy/system_wcwidth_fix (gavtroy/cmus@07f690188f1109ddcbf350263f20f7722d743248)\n* Endg4meZer0/master (Endg4meZer0/cmus@41e255716f62ff2e1659ac8f4d6b8507c6ca7179)\n* jdholtz/clear-marked-playlist (jdholtz/cmus@f538a3a50ec3d9858200a2424bc01b7dc4305716)\n* LunaPresent/master (LunaPresent/cmus@b2814bc3eb0d0c728b0c13d91b14caf544a357be)\n* jchook/playlists-are-sacred (jchook/cmus@e83c1e161171cc4482830381e094fcb11312668e)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2026-05-03T03:35:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07f690188f1109ddcbf350263f20f7722d743248",
"body": "Fixes #1497.",
"is_bot": false,
"headline": "Define _XOPEN_SOURCE so wcwidth can be found",
"author_name": "Gavin Troy",
"author_login": "gavtroy",
"committed_at": "2026-03-30T04:04:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d335e90abd5d000eef128debcb979d852f0f6b7f",
"body": "When compiling with GCC 15.2.1, the compiler issues a maybe-uninitialized warning with\nmessage: rb_parent_color may be used uninitialized. This is happening because the\nRB_CLEAR_NODE macro currently expands to rb_set_parent(node, node), which in turn\nattempts to read the node->rb_parent_color. In ce\n[…]\nthe RB_CLEAR_NODE macro\nto directly set the parent pointer without reading the potential garbage color value.\nThe new RB_CLEAR_NODE macro implementation is similar to what is used in the Linux kernel.",
"is_bot": false,
"headline": "Fix compiler warning about uninitialized rb_parent_color (#1484)",
"author_name": "Christos Gkekas",
"author_login": "chggr",
"committed_at": "2026-01-10T12:00:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "058e69ab0e1b77ea48fa5d64cf4ed1459955489b",
"body": null,
"is_bot": false,
"headline": "Fix memory leak in bass.c (#1477)",
"author_name": "Christos Gkekas",
"author_login": "chggr",
"committed_at": "2026-01-05T12:09:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ec703afc3e76d22bb63141871fd008e1e3a9764",
"body": null,
"is_bot": false,
"headline": "Standardise in using xmalloc (#1478)",
"author_name": "Christos Gkekas",
"author_login": "chggr",
"committed_at": "2026-01-02T09:35:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56446f70e86445caa96f6f4f0188f175fc1fd9a0",
"body": null,
"is_bot": false,
"headline": "Fix stringop-truncation warning (#1473)",
"author_name": "Christos Gkekas",
"author_login": "chggr",
"committed_at": "2025-12-12T07:27:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3a7f1ffcfa4293dd7e0264242a751fab5ea4224",
"body": "When compiling cmus I get multiple warnings around unterminated string\ninitialization. This patch fixes the warnings by using the nonstring\nattribute.",
"is_bot": false,
"headline": "Fix unterminated-string-initialization warnings (#1472)",
"author_name": "Christos Gkekas",
"author_login": "chggr",
"committed_at": "2025-12-11T07:51:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e83c1e161171cc4482830381e094fcb11312668e",
"body": "Playlists are important user-supplied data.\n\nPreviously, if playlist entries lived on an external hard drive, and\nthe drive was unplugged, cmus would cause data loss by deleting the\nentries from the playlist.\n\nThis change fixes that case, ensuring that when users add files to a\nplaylist, they are never deleted automatically by cmus.",
"is_bot": false,
"headline": "Do not delete missing files from playlists.",
"author_name": "Wes Roberts",
"author_login": "jchook",
"committed_at": "2025-11-24T01:43:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ced892aea2e006b7514ba64b1d40a05e42be40dd",
"body": null,
"is_bot": false,
"headline": "Fix compilation failure (#1467)",
"author_name": "ARRiMEKi OTOMANi",
"author_login": "4rrimeki",
"committed_at": "2025-11-13T15:59:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4252dbd72f58b09ddbcfe39f98894f2bab1b59b",
"body": null,
"is_bot": false,
"headline": "ip/flac: remove debug output spam",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-11-04T18:40:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36b9071baca13d57a97940661a8b3624a11038e2",
"body": "This polling is there since the initial commit, but there is no apparent\nreason for it to exist. Sometimes it would wait infinitely and block\nthe main thread and hang the whole player.",
"is_bot": false,
"headline": "op/alsa: remove polling for events before pause",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-11-04T18:40:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c81a0ba7c7b3d7e4d98a9d120f41d37cf0a6b4d9",
"body": null,
"is_bot": false,
"headline": "Make sure to not try freeing an uninitialized pointer",
"author_name": "Andrea Guzzo",
"author_login": "xant",
"committed_at": "2025-11-04T18:36:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32e0cde0a3c8d082d71342577e33c380219d25a6",
"body": "The modern gcc default is -std=gnu23 which the mp4v2 headers are not\ncompatible with. This was only a problem for the check, since for the\nactual compile we add EXTRA_CFLAGS that set -std=gnu11 or -std=c11\nanyway.",
"is_bot": false,
"headline": "Fix libmp4v2 check",
"author_name": "Gavin Troy",
"author_login": "gavtroy",
"committed_at": "2025-10-08T05:14:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c9c109bd754f30d215480510bf9bdfeab323652",
"body": "av_rescale() accepts int64_t, so offset was implicitly converted\nand rounded down to an integer number of seconds which has been causing\nmore samples to be discarded to reach the wanted time.",
"is_bot": false,
"headline": "ip/ffmpeg: optimize seeking (less sample discards)",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-10-05T13:31:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4612c2de44db8c1a8b380222d9db777a3eb5e7ef",
"body": "%lld expects long long but int64_t may be long. And GCC warns about that",
"is_bot": false,
"headline": "ip/ffmpeg: treat compiler warning about %lld",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-10-05T13:31:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "226a046acf3108ce1fd48958a9c53c03711c9498",
"body": null,
"is_bot": false,
"headline": "op/mixer_alsa: add alsamixer's volume scale",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-27T07:02:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b85a2237afc29e645c3f3e12145c5379524c95d",
"body": null,
"is_bot": false,
"headline": "op/mixer_alsa: setting mixer control like in aplay",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-27T07:02:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3157b788a7eeb8d1a02d6dad2c05fde6f900f4aa",
"body": "If a stream specifies its bitrate in an \"icy-br\" header, we can use it\nto populate the bitrate in the track info. Without this fix, no bitrate\nwas displayed for a stream, either in the track info or the status bar.\n\nAlso changed a print format specifier from %ld to %lld to fix a warning\nas the former is too small for the int64_t type.",
"is_bot": false,
"headline": "Fix for missing Icecast streaming bitrate display.",
"author_name": "Ken McLeod",
"author_login": "thecloudexpanse",
"committed_at": "2025-09-21T13:40:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0788a0759399a61324b2373e4300d970c0a51b66",
"body": null,
"is_bot": false,
"headline": "cue: handle adding a directory with cue files",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c09f3ccf5ad37d8201b3cc865154ef23e7a9284d",
"body": null,
"is_bot": false,
"headline": "Fix ptr_array_unique always removing 1st element",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "390c8a15e768f3e5c4a9ec7438b1efe28421bad0",
"body": "Imagine we have a directory with these files:\ntest.cue\ntest.wav\ncd.wav\n\ntest.cue content:\nFILE \"cd.wav\" WAVE\n TRACK 01 AUDIO\n\nWhen we do `:add test.wav`, cd.wav is added to the library instead of\ntest.wav. Obviously it wasn't user's intention.\n\nI think if the user wants to add a Cue file, then they would just write\n`:add test.cue`. This 'associated cue' mechanism seems obsolete.",
"is_bot": false,
"headline": "cue: remove 'associated cue' mechanism",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "123a8d34d36996896f5794306718fdbd04922168",
"body": "Now Cue file can be added like `:add file.cue`",
"is_bot": false,
"headline": "cue: enable adding cue file directly (not by url)",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75fdd9b0e87c264e1c40c2b3c14adeeb4e8184b6",
"body": null,
"is_bot": false,
"headline": "cue: add replaygain and genre to track info",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ada493b6abc582ca907220c1620bfede9eed7996",
"body": "When cue sheet is written for a lossy audio source, ip_duration may\nreturn an estimation. We shouldn't take it as end_offset.",
"is_bot": false,
"headline": "cue: more precise time tracking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ff092774b3f10661fbcea0d35f340fcdb47235f",
"body": "PREGAP and POSTGAP directives tell how much silence (that is not present\nin the audio file) to add to the track.\nThis definitely should be handled in input plugin instead of the parser.",
"is_bot": false,
"headline": "cue: fix incorrect track timing calculation",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48a630f1f38ce397de989a3a249d9628f9902643",
"body": "1. Multiple FILEs are now allowed.\nMultiple FILE directives with same file name are treated as different files.\n\n2. Track numbers may not start at 1 and may not be sequential, but still\nmust be ordered (this is just to make program simpler).\nExample:\n3, 6, 7 - correct;\n3, 2, 7 - incorrect;\n1, 1 - incorrect.",
"is_bot": false,
"headline": "cue: multiple FILEs; non sequential TRACK numbers",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "139dcdef09cb9524425b9af32f176cff7415318f",
"body": null,
"is_bot": false,
"headline": "cue: fix memory leak",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-09T09:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4dffacb9188dbd1004fd289de4e7661e08aa415",
"body": "* cmus/master (cmus/cmus@d73726dece599cf2b8d5103b20eb1a5e0095bc43)\n* 0ax1/fix-locale-macos (0ax1/cmus@3bbb60845156e5504f264879453643d4d7aae08d)\n* WalrusDevil/output_plugin_fallback (WalrusDevil/cmus@e9034e838609268d940a42e9f7e764323d239aa2)\n* ihy123/cue (ihy123/cmus@d38672fc53534503b6958c74960670851\n[…]\n3a50ec3d9858200a2424bc01b7dc4305716)\n* LunaPresent/master (LunaPresent/cmus@b2814bc3eb0d0c728b0c13d91b14caf544a357be)\n* hunkyburrito/master (hunkyburrito/cmus@9c5643d2a0e5a7c99dbb8e689b3dae72614c737b)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2025-09-03T03:47:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d38672fc53534503b6958c749606708515148a7d",
"body": null,
"is_bot": false,
"headline": "cue: handle adding a directory with cue files",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0275c978ce75eb1f09976cadfa6ebfd6f27ca8b0",
"body": null,
"is_bot": false,
"headline": "Fix ptr_array_unique always removing 1st element",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2683792c8ff2c84253b779cbe3d01c3fce693886",
"body": "Imagine we have a directory with these files:\ntest.cue\ntest.wav\ncd.wav\n\ntest.cue content:\nFILE \"cd.wav\" WAVE\n TRACK 01 AUDIO\n\nWhen we do `:add test.wav`, cd.wav is added to the library instead of\ntest.wav. Obviously it wasn't user's intention.\n\nI think if the user wants to add a Cue file, then they would just write\n`:add test.cue`. This 'associated cue' mechanism seems obsolete.",
"is_bot": false,
"headline": "cue: remove 'associated cue' mechanism",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a11ac322707352b712ea2a0f4281cce753ebf02c",
"body": "Now Cue file can be added like `:add file.cue`",
"is_bot": false,
"headline": "cue: enable adding cue file directly (not by url)",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bddbe4f1b6bcda308b40f150996c6cfbd3a6fa12",
"body": null,
"is_bot": false,
"headline": "cue: add replaygain and genre to track info",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a8fc03f496fbfd9a9294ee1e17348801a96b495",
"body": "When cue sheet is written for a lossy audio source, ip_duration may\nreturn an estimation. We shouldn't take it as end_offset.",
"is_bot": false,
"headline": "cue: more precise time tracking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9fd8cfabd46dd295e8eef63218d87dbb3b567f6",
"body": "PREGAP and POSTGAP directives tell how much silence (that is not present\nin the audio file) to add to the track.\nThis definitely should be handled in input plugin instead of the parser.",
"is_bot": false,
"headline": "cue: fix incorrect track timing calculation",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dc4d529474d35349c1d7267ebea1bc84c79e8b3",
"body": "1. Multiple FILEs are now allowed.\nMultiple FILE directives with same file name are treated as different files.\n\n2. Track numbers may not start at 1 and may not be sequential, but still\nmust be ordered (this is just to make program simpler).\nExample:\n3, 6, 7 - correct;\n3, 2, 7 - incorrect;\n1, 1 - incorrect.",
"is_bot": false,
"headline": "cue: multiple FILEs; non sequential TRACK numbers",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a04985c27b13cbd338d8cabac3e1608a94dbe2",
"body": null,
"is_bot": false,
"headline": "cue: fix memory leak",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d73726dece599cf2b8d5103b20eb1a5e0095bc43",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: change sample format conversions",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3810797e4afb4272d2623a8745a15eb32fdcd9a3",
"body": "avcodec_close() can be safely removed because avcodec_free_context()\nis its replacement since 2016. See ffmpeg commit 2ef6dab0a79\n\nBuilds with v3.3.9 v4.0.6 v6.1.3 v7.1.1 v8.0",
"is_bot": false,
"headline": "ip/ffmpeg: fix building for ffmpeg 8.0",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee60ef049e977632b05e827b450953b9d0dc13a8",
"body": "Previously ffmpeg_read()'s while loop was kinda leaking into\nffmpeg_get_frame(), now it doesn't.",
"is_bot": false,
"headline": "ip/ffmpeg: improve readability",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cebaa7b5b9793c47bc7cba3181e729e5bcceebd",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: don't process empty frames",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30304f4780051ea72fb2787d8c95ec688914aace",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: better frame skipping logic",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb7965415d298903ff0a0f0c1d909ca46698bc7b",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: reset swr_frame_start when seeking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e109c45a3be88517984e6a4ec4843884560cdd95",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: remember swr_frame's capacity",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bb25cf3eabbdb7911ea8144778ab43f76c58b10",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: flush swresample buffer when seeking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9d3c684387cb73d75fdc074a8388c0209987680",
"body": "To prevent segfault in ip_setup() because channels=0, validate ip_data->sf\nafter opening ip.",
"is_bot": false,
"headline": "Validate sample format in ip_open()",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef58a5677c39c2627f66dcc31507f741f6ed2094",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: major refactor",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24b157cca699443d23664f126430f28fa98f7c24",
"body": "ffmpeg download page states that v4.0.6 has\n- libavutil 56.14.100\n- libavcodec 58.18.100\n- libavformat 58.12.100\n(https://ffmpeg.org/olddownload.html)\n\nAfter removing all checks for versions lower than these, the plugin\nstill compiles with v3.3.9 headers.\n\nAfter all, why be better with compatibility than developers themselves?",
"is_bot": false,
"headline": "ip/ffmpeg: remove excessive version checks",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "308877bc1107a85fcde4ada027c1e5f6a6e4473b",
"body": null,
"is_bot": false,
"headline": "ip/ffmpeg: skip samples only when needed",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb038ed977df26624fd409d8819b947c2b490064",
"body": "av_seek_frame() and avformat_seek_file() seek to nearest \"keyframe\". For\ncodecs like, for example, ape this means that seeking will be very off\n(5 seconds or more). So what we do is:\n1. seek to nearest \"keyframe\" before the desired time,\n2. discard some frames to approach the desired time.",
"is_bot": false,
"headline": "ip/ffmpeg: more precise seeking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-09-02T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8c4df8fc407e45463e09628ba2b60850650e8dd",
"body": "Drain stream before closing. Do it only if the stream is playing to\navoid \"hang at quit while paused\" issue.",
"is_bot": false,
"headline": "pulse: drain stream before closing",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T15:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac5098cdd23c4d0f1f9eb94517beeecbb8ab03ab",
"body": null,
"is_bot": false,
"headline": "pulse: more linux-like code style",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T15:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50d3ce26f406ef83788e227ebb7d8ded0cf48ecd",
"body": null,
"is_bot": false,
"headline": "pulse: style changes; more error checks",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T15:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78a1e2ccad95c331f1832d25072f0a14143cc26f",
"body": null,
"is_bot": false,
"headline": "pulse: add APPLICATION_ID prop",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T15:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f012fd50c6a7161f774f89a90044a4a00b70bd20",
"body": null,
"is_bot": false,
"headline": "pulse: rearrange functions",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T15:41:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1445956f1c0e20de88e7149cc917eed7aed9584",
"body": null,
"is_bot": false,
"headline": "op/mixer_alsa: use alsa-lib provided parse_sid()",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-25T07:09:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26e70770f1ad3a07310079edfbd8202b38f14b6d",
"body": null,
"is_bot": false,
"headline": "op/alsa: add -lm",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-24T15:48:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a87a66492475e8f81f632a7be47878ede7cdf3c",
"body": "I think that is not very intuitive. Maybe it would've been better to keep\nfalling back to 'Master' but at least set the config variable accordingly,\nIDK; it might be annoying though.",
"is_bot": false,
"headline": "op/mixer_alsa: don't use 'Master' as a fallback",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-24T01:54:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de855cdf5f6b733ca946e729015832d47a6a1578",
"body": null,
"is_bot": false,
"headline": "op/mixer_alsa: add alsamixer's volume scale",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-24T01:48:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8162fd8c157824b4cb5e5b0a014077d303b50581",
"body": null,
"is_bot": false,
"headline": "op/mixer_alsa: setting mixer control like in aplay",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-08-24T01:46:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3dd9997c61dfbbbd35c16da4485dfcf3bdd6931",
"body": null,
"is_bot": false,
"headline": "Do not call op_select_any() after startup",
"author_name": "WalrusDevil",
"author_login": "WalrusDevil",
"committed_at": "2025-08-20T19:32:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffb9bfee888dd79c8272e25fe9e6bb1ec10660fa",
"body": null,
"is_bot": false,
"headline": "Try to fallback to any plugin upon failure to init output plugin",
"author_name": "WalrusDevil",
"author_login": "WalrusDevil",
"committed_at": "2025-08-20T19:32:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8c8541c1499e051ce691bc40f875f35325c8ff0",
"body": "(Or if we add/remove tracks to the current \"window\", although that's\nrather uncommon.)",
"is_bot": false,
"headline": "Respect scroll_offset setting when resizing window",
"author_name": "Gavin Troy",
"author_login": "gavtroy",
"committed_at": "2025-08-20T17:48:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "382ce81254450d3cb189cf1982cacd7e01896567",
"body": null,
"is_bot": false,
"headline": "add sort by duration",
"author_name": "hunkyburrito",
"author_login": "hunkyburrito",
"committed_at": "2025-08-20T17:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a542e85a3b7c779571e62e769a8df2434d21210a",
"body": "* cmus/master (cmus/cmus@d33870808d007a6456ddbc9fcc65fcdd08332e28)\n* 0ax1/fix-locale-macos (0ax1/cmus@3bbb60845156e5504f264879453643d4d7aae08d)\n* WalrusDevil/output_plugin_fallback (WalrusDevil/cmus@e9034e838609268d940a42e9f7e764323d239aa2)\n* ihy123/cue (ihy123/cmus@d15713cce697a43f1e161e56e09b2d7d4\n[…]\n3a50ec3d9858200a2424bc01b7dc4305716)\n* LunaPresent/master (LunaPresent/cmus@b2814bc3eb0d0c728b0c13d91b14caf544a357be)\n* hunkyburrito/master (hunkyburrito/cmus@9c5643d2a0e5a7c99dbb8e689b3dae72614c737b)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2025-08-06T14:07:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9c5643d2a0e5a7c99dbb8e689b3dae72614c737b",
"body": null,
"is_bot": false,
"headline": "add sort by duration",
"author_name": "hunkyburrito",
"author_login": "hunkyburrito",
"committed_at": "2025-07-30T22:06:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2814bc3eb0d0c728b0c13d91b14caf544a357be",
"body": null,
"is_bot": false,
"headline": "mpris: set xesam:url tag",
"author_name": "Luna Present",
"author_login": "LunaPresent",
"committed_at": "2025-07-15T14:26:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bbb60845156e5504f264879453643d4d7aae08d",
"body": null,
"is_bot": false,
"headline": "drop core audio from list",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-06-17T09:48:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7570d3cfd73b3d1d615e8e6bbab8dfcce827d0f3",
"body": "* cmus/master (cmus/cmus@d33870808d007a6456ddbc9fcc65fcdd08332e28)\n* 0ax1/fix-locale-macos (0ax1/cmus@0c638eaa70fd60c73bc6f8a5cd0687aee61cb058)\n* WalrusDevil/output_plugin_fallback (WalrusDevil/cmus@e9034e838609268d940a42e9f7e764323d239aa2)\n* ihy123/cue (ihy123/cmus@d15713cce697a43f1e161e56e09b2d7d4\n[…]\nc1b69ba0a6a40ecfa4c9d78d03e887)\n* Endg4meZer0/master (Endg4meZer0/cmus@41e255716f62ff2e1659ac8f4d6b8507c6ca7179)\n* jdholtz/clear-marked-playlist (jdholtz/cmus@f538a3a50ec3d9858200a2424bc01b7dc4305716)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2025-06-13T14:28:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f538a3a50ec3d9858200a2424bc01b7dc4305716",
"body": null,
"is_bot": false,
"headline": "Clear the marked playlist when focus is in the playlist list",
"author_name": "jdholtz",
"author_login": "jdholtz",
"committed_at": "2025-05-10T19:19:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c638eaa70fd60c73bc6f8a5cd0687aee61cb058",
"body": null,
"is_bot": false,
"headline": "drop obsolete impls from header",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-23T21:26:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb344def2c4445596630a2617b6c332ede3e7664",
"body": "* cmus/master (cmus/cmus@d33870808d007a6456ddbc9fcc65fcdd08332e28)\n* 0ax1/fix-locale-macos (0ax1/cmus@78f585366c391e5732b3cc3c2bf5107d3255133b)\n* WalrusDevil/output_plugin_fallback (WalrusDevil/cmus@e9034e838609268d940a42e9f7e764323d239aa2)\n* ihy123/cue (ihy123/cmus@d15713cce697a43f1e161e56e09b2d7d46e572df)\n* ihy123/pulse_fix (ihy123/cmus@c713341575c1b69ba0a6a40ecfa4c9d78d03e887)\n* Endg4meZer0/master (Endg4meZer0/cmus@41e255716f62ff2e1659ac8f4d6b8507c6ca7179)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2025-04-23T14:28:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78f585366c391e5732b3cc3c2bf5107d3255133b",
"body": null,
"is_bot": false,
"headline": "clean: invert condition",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-22T21:04:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1859b1539abd6da188809ba86f66f00ef656b8f",
"body": null,
"is_bot": false,
"headline": "clean: drop 'A'",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-22T21:02:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82903aba0b895f2d03294488a7452f8f0953f86e",
"body": null,
"is_bot": false,
"headline": "clean: drop unused functions",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-22T20:56:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ceef387c13601e95561183b6ea5f2893f8fd20c1",
"body": null,
"is_bot": false,
"headline": "ref: diff core foundation check",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-22T20:54:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84a5df2a7c5efc271aebf31ebf4d528679ff15e1",
"body": null,
"is_bot": false,
"headline": "fix: local macos error",
"author_name": "Alexander Droste",
"author_login": "0ax1",
"committed_at": "2025-04-15T19:47:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9034e838609268d940a42e9f7e764323d239aa2",
"body": null,
"is_bot": false,
"headline": "Do not call op_select_any() after startup",
"author_name": "WalrusDevil",
"author_login": "WalrusDevil",
"committed_at": "2025-03-25T20:07:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35a7479831279d768bcfa0a73008a6a0e5a9eee5",
"body": null,
"is_bot": false,
"headline": "Try to fallback to any plugin upon failure to init output plugin",
"author_name": "WalrusDevil",
"author_login": "WalrusDevil",
"committed_at": "2025-03-19T05:39:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41e255716f62ff2e1659ac8f4d6b8507c6ca7179",
"body": null,
"is_bot": false,
"headline": "fix: MPRIS seeked signals reporting old position instead of new",
"author_name": "Endg4me_",
"author_login": "Endg4meZer0",
"committed_at": "2025-03-16T11:17:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d15713cce697a43f1e161e56e09b2d7d46e572df",
"body": null,
"is_bot": false,
"headline": "cue: handle adding a directory with cue files",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beede71d4a24586cbb2aac523e0d145f53eca005",
"body": null,
"is_bot": false,
"headline": "Fix ptr_array_unique always removing 1st element",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d01ecbd266d0652ab4afb1705fac861e7b34618",
"body": "Imagine we have a directory with these files:\ntest.cue\ntest.wav\ncd.wav\n\ntest.cue content:\nFILE \"cd.wav\" WAVE\n TRACK 01 AUDIO\n\nWhen we do `:add test.wav`, cd.wav is added to the library instead of\ntest.wav. Obviously it wasn't user's intention.\n\nI think if the user wants to add a Cue file, then they would just write\n`:add test.cue`. This 'associated cue' mechanism seems obsolete.",
"is_bot": false,
"headline": "cue: remove 'associated cue' mechanism",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "113125578db974add3c46f9453710ac4b0629706",
"body": "Now Cue file can be added like `:add file.cue`",
"is_bot": false,
"headline": "cue: enable adding cue file directly (not by url)",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77fb7e47698347ae5a86b0c2e4d2af91edf6fa79",
"body": null,
"is_bot": false,
"headline": "cue: add replaygain and genre to track info",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dbcedd47924696b952651138ae7d6aad69bbf44",
"body": "When cue sheet is written for a lossy audio source, ip_duration may\nreturn an estimation. We shouldn't take it as end_offset.",
"is_bot": false,
"headline": "cue: more precise time tracking",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6791b0ed6274c5f3e183a840199bba2a6502d82c",
"body": "PREGAP and POSTGAP directives tell how much silence (that is not present\nin the audio file) to add to the track.\nThis definitely should be handled in input plugin instead of the parser.",
"is_bot": false,
"headline": "cue: fix incorrect track timing calculation",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9ee96e3d82431f82607a492fdc7d2480e8190ab",
"body": "1. Multiple FILEs are now allowed.\nMultiple FILE directives with same file name are treated as different files.\n\n2. Track numbers may not start at 1 and may not be sequential, but still\nmust be ordered (this is just to make program simpler).\nExample:\n3, 6, 7 - correct;\n3, 2, 7 - incorrect;\n1, 1 - incorrect.",
"is_bot": false,
"headline": "cue: multiple FILEs; non sequential TRACK numbers",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18af06b985eb4a3b03876f16d84a5115808437e5",
"body": null,
"is_bot": false,
"headline": "cue: fix memory leak",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-03-16T11:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d33870808d007a6456ddbc9fcc65fcdd08332e28",
"body": "The updated list (including order) is copied directly from the README.\nNo additions. Removals:\n\n- bash-completion (not used)\n- libcue-dev (not used)\n- libroar-dev (no longer available, breaking the CI build)",
"is_bot": false,
"headline": "[CI] Update dependency list to fix ubuntu build setup",
"author_name": "Gavin Troy",
"author_login": "gavtroy",
"committed_at": "2025-03-16T11:14:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c713341575c1b69ba0a6a40ecfa4c9d78d03e887",
"body": "Drain stream before closing. Do it only if the stream is playing to\navoid \"hang at quit while paused\" issue.",
"is_bot": false,
"headline": "pulse: drain stream before closing",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-02-12T17:27:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dd6468552ed8a95549eb6c5f70a41a043b3b85d",
"body": null,
"is_bot": false,
"headline": "pulse: more linux-like code style",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-02-12T17:27:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf83e88f77693927a672f125398e96472bf05584",
"body": null,
"is_bot": false,
"headline": "pulse: style changes; more error checks",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-02-12T15:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4eab8cc845d910130b553e4d59ca72dd266346be",
"body": null,
"is_bot": false,
"headline": "pulse: add APPLICATION_ID prop",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-02-12T15:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4900f9bb06dabb266bcb5921e5f38d6b00ae1779",
"body": null,
"is_bot": false,
"headline": "pulse: rearrange functions",
"author_name": "ihy123",
"author_login": "ihy123",
"committed_at": "2025-02-12T15:58:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66ee9c3cab7f2d5b0a72ec9b77f51e7cf46ac4bb",
"body": "It's required for av_strerror.",
"is_bot": false,
"headline": "Check for libavutil pkg-config",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2025-01-11T07:09:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a15a9e0522d3a8d56dedfbb447d4499c78ceceb1",
"body": null,
"is_bot": false,
"headline": "op/aaudio: Make the requested buffer capacity configurable",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2024-11-29T12:46:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b96ab56184626d01a3a89ce1647b0488cf22391",
"body": "On some devices (e.g., the Pixel 9 with Android 15), the minimum audio\ndevice latency is low enough that the default buffer capacity selected\nby AAudio is low enough that cmus can't keep up with producing audio.\n\nThis doesn't seem to be an issue on most other devices.\n\nFor reference, the default sel\n[…]\n\ncapacity and burst size of 4000/2000 on the Pixel 9, and 6734/3367 on\nthe Pixel 8. Higher values result in slightly lower CPU usage, but\nmore UI lag. Lower values start running into buffer underruns.",
"is_bot": false,
"headline": "op/aaudio: Ensure the buffer is at least 80ms",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2024-11-29T12:46:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e328d34e28d379997d4bd56b2f63b67f1a993d16",
"body": "* cmus/master (cmus/cmus@58d34cf9db5c29e01a985a48a9b6947855cb6cc9)",
"is_bot": false,
"headline": "Reconcile branches",
"author_name": "Patrick Gaskin",
"author_login": "pgaskin",
"committed_at": "2024-10-26T18:22:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58d34cf9db5c29e01a985a48a9b6947855cb6cc9",
"body": null,
"is_bot": false,
"headline": "cmus 2.12.0",
"author_name": "Gregory Petrosyan",
"author_login": "flyingmutant",
"committed_at": "2024-10-26T10:27:42Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 52,
"commits_last_year": 40,
"latest_release_at": "2019-01-29T09:09:08Z",
"latest_release_tag": "v2.8.0",
"releases_from_tags": true,
"days_since_last_push": 3,
"active_weeks_last_year": 19,
"days_since_latest_release": 2734,
"mean_days_between_releases": 252.7
},
"community": {
"has_readme": false,
"has_license": false,
"has_description": false,
"has_contributing": false,
"health_percentage": null,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 1,
"stars": 3,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2020-01-22",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 67658,
"source_files_sampled": 172,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 3,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "tihirvon",
"commits": 761,
"avatar_url": "https://avatars.githubusercontent.com/u/484431?v=4"
},
{
"type": "User",
"login": "flyingmutant",
"commits": 424,
"avatar_url": "https://avatars.githubusercontent.com/u/73059?v=4"
},
{
"type": "User",
"login": "pgaskin",
"commits": 349,
"avatar_url": "https://avatars.githubusercontent.com/u/13909717?v=4"
},
{
"type": "User",
"login": "weisslj",
"commits": 275,
"avatar_url": "https://avatars.githubusercontent.com/u/99803?v=4"
},
{
"type": "User",
"login": "mahkoh",
"commits": 193,
"avatar_url": "https://avatars.githubusercontent.com/u/1882250?v=4"
},
{
"type": "User",
"login": "gavtroy",
"commits": 109,
"avatar_url": "https://avatars.githubusercontent.com/u/3988605?v=4"
},
{
"type": "User",
"login": "ihy123",
"commits": 61,
"avatar_url": "https://avatars.githubusercontent.com/u/87945041?v=4"
},
{
"type": "User",
"login": "nefthy",
"commits": 39,
"avatar_url": "https://avatars.githubusercontent.com/u/218968?v=4"
},
{
"type": "User",
"login": "Wang-Yue",
"commits": 31,
"avatar_url": "https://avatars.githubusercontent.com/u/889340?v=4"
},
{
"type": "User",
"login": "jolange",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/6584443?v=4"
}
],
"contributors_sampled": 100,
"top_contributor_share": 0.305
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"build.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 16 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "a6b82eb2e38e24f8a7ceda5a2e0b191480513944",
"ran_at": "2026-07-25T12:26:50Z",
"aggregate_score": 3.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-05-03T03:37:41Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/pgaskin/cmus",
"host": "github.com",
"name": "cmus",
"owner": "pgaskin"
},
"metrics": {
"overall": {
"key": "overall",
"band": "critical",
"name": "Overall health",
"note": "High-Risk Jurisdiction Policy applies a 50% multiplier to weighted overall health and gives it an At risk ceiling of 49.",
"notes": [
{
"code": "jurisdiction_overall_adjustment",
"params": {
"cap": 49,
"pct": 50
}
}
],
"value": 17,
"inputs": {
"security": 16,
"vitality": 51,
"community": 14,
"governance": 49,
"engineering": 32,
"high_risk_jurisdiction_cap": 49,
"high_risk_jurisdiction_multiplier": 50,
"weighted_overall_before_jurisdiction": 34,
"overall_after_jurisdiction_multiplier": 17
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 51,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 40,
"human_commit_share": 1,
"days_since_last_push": 3,
"active_weeks_last_year": 19
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "19/52 weeks with commits",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 19
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "40 commits in the last year",
"points": 14.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 40
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 32,
"inputs": {
"releases_count": 52,
"latest_release_tag": "v2.8.0",
"releases_from_tags": true,
"days_since_latest_release": 2734,
"mean_days_between_releases": 252.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "52 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 52
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2734 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 2734
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~252.7 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 252.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 83,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 83 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 83
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 14,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 5,
"inputs": {
"forks": 1,
"stars": 3,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": false,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (GPL-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "GPL-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 49,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"bus_factor": 3,
"contributors_sampled": 100,
"top_contributor_share": 0.305
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "3 contributor(s) cover half of all commits",
"points": 36,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 3
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 30% of commits",
"points": 15.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 30
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "100 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 100
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 16 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"followers": 291,
"owner_type": "User",
"is_verified": null,
"owner_login": "pgaskin",
"public_repos": 99,
"account_age_days": 3990
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "291 followers of pgaskin",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 291,
"login": "pgaskin"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "99 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 99
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 32,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 30,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"topics": [
"cmus",
"package",
"experimental",
"no-delete-fork"
],
"has_wiki": false,
"homepage": null,
"has_readme": false,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 16,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized. High-Risk Jurisdiction Policy applies a 50% multiplier to Security posture and gives it an At risk ceiling of 49.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "jurisdiction_posture_adjustment",
"params": {
"cap": 49,
"pct": 50
}
}
],
"value": 16,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.3,
"high_risk_jurisdiction_cap": 49,
"high_risk_jurisdiction_multiplier": 50,
"security_posture_after_multiplier": 16,
"security_posture_before_jurisdiction": 33
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 16 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "moderate",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 50,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": true,
"exposures": [
{
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "Russia: top_contributor (1)",
"points": 50,
"status": "partial",
"details": [
{
"code": "jurisdiction_exposure",
"params": {
"role": "top_contributor",
"count": 1,
"country": "Russia"
}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 43,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.66,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "66 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 35.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 66,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 67658,
"source_files_sampled": 172,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/172 source files over 60KB",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 172,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Community profile unavailable"
],
"report_type": "repository",
"generated_at": "2026-07-25T12:27:08.527465Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pgaskin/cmus.svg",
"full_name": "pgaskin/cmus",
"license_state": "standard",
"license_spdx": "GPL-2.0"
}Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.
Як окремий результат виглядає на тлі всього реєстру: сукупна статистика.