Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-25 16:24 UTC

ziggy42 / epsilon

A WASM virtual machine written in Go with 0 dependencies

GoApache-2.0★ 434 зірки⑂ 11 форківз лист. 2025 р.Переглянути на GitHub ↗

ziggy42/epsilon має індекс здоров’я 60 зі 100, що відповідає смузі «Помірний». Найвищий показник — Vitality (77/100), найнижчий — Security (36/100). Останнє оновлення було 16 днів тому. Більшість нещодавньої роботи виконує один учасник.

60
загалом / 100
Помірний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

60
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

Andrea PivettaОсобистий обліковий запис
58 підписників41 публічний репозиторійз квіт. 2013 р.@google

Цей репозиторій належить особистому обліковому запису. Проєкт з єдиним власником несе більший ризик безперервності, ніж підтримуваний організацією.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікація
Gogithub.com/ziggy42/epsilonv0.1.1-616 днів тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

77Добрий · 22% загального індексу
Як обчислюється оцінка
28.8/36Свіжість push — останній push 16 дн. тому
12.5/36Ритм комітів — 18/52 тижнів із комітами
18/18Обсяг комітів — 193 комітів за останній рік
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Використані вхідні дані
commits_last_year193
human_commit_share1
days_since_last_push16
active_weeks_last_year18
Як обчислюється оцінка
16.2/27Випускає релізи — 6 тегів версій (без релізів GitHub)
36/36Свіжість релізів — останній реліз 16 дн. тому
27/27Ритм релізів — реліз кожні ~42,7 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count6
latest_release_tagv0.1.1
releases_from_tagsтак
days_since_latest_release16
mean_days_between_releases42,7
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

61Помірний · 18% загального індексу
Як обчислюється оцінка
42.8/60Зірки — 434 зірок
8.3/25Форки — 11 форків
3.3/15Спостерігачі — 5 спостерігачів
Використані вхідні дані
forks11
stars434
watchers5
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (Apache-2.0)
18/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingтак
has_issue_templateні
has_code_of_conductні
has_pull_request_templateні

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

59Помірний · 24% загального індексу
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
0.1/22.5Розподіл комітів — головний контриб’ютор — автор 100% комітів
2.7/13.5Широта контриб’юторів — 2 контриб’юторів
3/10OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3
Використані вхідні дані
bus_factor1
contributors_sampled2
top_contributor_share0,995
Як обчислюється оцінка
46.8/46.8Вирішення issue — закрито 100% issue
33.2/38.3Прийняття PR — злито 66/76 вирішених PR
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Використані вхідні дані
merged_prs66
open_issues0
closed_issues9
issue_closed_ratio1
closed_unmerged_prs10
Як обчислюється оцінка
10/30Підтримка власника — особистий (користувацький) обліковий запис
0/20Верифікований домен — не застосовно до користувацьких облікових записів
12.7/25Охоплення власника — 58 підписників у ziggy42
23.8/25Послужний список — 41 публічних репозиторіїв, вік облікового запису ~13 р.
Використані вхідні дані
followers58
owner_typeUser
is_verified
owner_loginziggy42
public_repos41
account_age_days4 838
Виключено з оцінювання (немає даних або не застосовно): Верифікований домен. Залишкові ваги перенормовано.

Супровід пакетів

100Відмінний
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у go
35/35Свіжість публікацій — остання публікація 16 дн. тому
20/20Історія версій — 6 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packagesgithub.com/ziggy42/epsilon
ecosystemsgo
any_deprecatedні
min_days_since_publish16

Інженерна якість

Чи наявні базові інженерні практики та документація?

61Помірний · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 1 процес(ів) CI
24/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 15 out of 15 merged PRs checked by a CI test -- score normalized to 10
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configні
has_precommit_configні

Документація

50Помірний
Як обчислюється оцінка
30/30README
0/25Каталог документації
0/15Сайт документації / домашня сторінка
10/10Опис репозиторію
10/10Теми — 5 тем
0/10Wiki
Використані вхідні дані
topicswasm, golang, go, webassembly, webassembly-runtime
has_wikiні
homepage
has_readmeтак
has_docs_dirні
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

36У зоні ризику · 16% загального індексу

Стан безпеки

36У зоні ризику
Як обчислюється оцінка
0/7.5Binary-Artifacts — binaries present in source code
0/7.5Branch-Protection — немає даних
2.5/2.5CI-Tests — 15 out of 15 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0.8/2.5Contributors — project has 1 contributing companies or organizations -- score normalized to 3
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
7.5/7.5Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — немає даних
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate3,6
Виключено з оцінювання (немає даних або не застосовно): branch_protection, packaging, signed_releases. Залишкові ваги перенормовано.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

71Добрий · 0% загального індексу
Як обчислюється оцінка
45/45Інструкції для агентів — AGENTS.md, CLAUDE.md
0/15Машиночитана документація (llms.txt)
30.9/40Читабельна історія комітів — намір зазначено у 58 з 100 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,58
agent_instruction_filesAGENTS.md, CLAUDE.md
agent_instruction_max_bytes2 290
Як обчислюється оцінка
18/18Розгортання однією командою — Makefile
22/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
11/11Статична перевірка типів — Go (статично типізована)
10/10Відтворюване середовище — lockfile
8/10Підтверджена практика роботи з агентами — 4 з останніх 100 комітів створено агентом або з його зазначенням
0/8Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsтак
lockfilesgo.sum, uv.lock
has_dockerfileні
typed_languageтак
bootstrap_filesMakefile
has_devcontainerні
has_linter_configні
typecheck_configs
agent_commit_share0,04
toolchain_manifestsgo.mod
dependency_bot_commit_share0
Як обчислюється оцінка
45/45Типізований код — Go (статично типізована)
54/55Керовані розміри файлів — 1/54 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageGo
largest_source_bytes64 795
source_files_sampled54
oversized_source_files1
Як обчислюється оцінка
0/40Схема API (OpenAPI/GraphQL/proto)
0/20Сервер MCP
40/40Придатні до запуску приклади — example
Використані вхідні дані
example_dirsexample
has_mcp_signalні
api_schema_files

Ключові факти

434зірок GitHub
2контриб'юторів
193комітів за останні 12 місяців
16днів від останнього пушу
6релізів
1бас-фактор
0відкритих issue
Go, PyPIпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • Could not fetch pypi package 'epsilon-scripts' from its registry
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Докладніше

Історія зірок і форків 0 ★ / 11 ⇿
0Зірки
11Форки
5Релізи

Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.

0246810121162025-122026-032026-06
Мажорні 0Мінорні 1Патчі 4
OpenSSF Scorecard 3.6 / 10
3.6сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-25 16:23 UTC

0Binary-Artifactsbinaries present in source code
н/дBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests15 out of 15 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
3Contributorsproject has 1 contributing companies or organizations -- score normalized to 3
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
н/дPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Прямі залежності 1
РеєстрПакетОбмеження версіїМаніфест
Gogolang.org/x/sysv0.45.0go.mod
Усі залежності не зібрано

Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [
        "wasm",
        "golang",
        "go",
        "webassembly",
        "webassembly-runtime"
      ],
      "is_fork": false,
      "size_kb": 535,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "C": 28900,
        "Go": 537413,
        "Python": 9000,
        "Makefile": 7646,
        "WebAssembly": 104
      },
      "pushed_at": "2026-07-09T15:44:44Z",
      "created_at": "2025-11-22T14:14:22Z",
      "owner_type": "User",
      "updated_at": "2026-07-09T15:45:16Z",
      "description": "A WASM virtual machine written in Go with 0 dependencies",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://andreapivetta.com/",
      "name": "Andrea Pivetta",
      "type": "User",
      "login": "ziggy42",
      "company": "@google",
      "location": "Zurich",
      "followers": 58,
      "avatar_url": "https://avatars.githubusercontent.com/u/4258550?v=4",
      "created_at": "2013-04-25T19:02:19Z",
      "is_verified": null,
      "public_repos": 41,
      "account_age_days": 4838
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-07-09T15:44:10Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-05-18T21:17:57Z"
        },
        {
          "tag": "v0.0.4",
          "kind": "patch",
          "published_at": "2026-02-01T01:55:57Z"
        },
        {
          "tag": "v0.0.3",
          "kind": "patch",
          "published_at": "2025-12-20T15:44:13Z"
        },
        {
          "tag": "v0.0.2",
          "kind": "patch",
          "published_at": "2025-12-14T20:30:52Z"
        },
        {
          "tag": "v0.0.1",
          "kind": "patch",
          "published_at": "2025-12-07T22:30:19Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "cfa0c9435331a4ab6ad83290c54c8b3be4a82f9d",
          "body": null,
          "is_bot": false,
          "headline": "Release version 0.1.1",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-07-09T15:44:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b4561e6eb41e996c31ec866c4fd7c277c02a83b",
          "body": "* Speed up the VM dispatch hot path\n\nThree stacked changes, measured with the benchmark suite (n=6 vs main:\ngeomean -1.99%, FactorialRecursive -5.75%, FibonacciRecursive -4.32%,\nSortingBubbleSort -4.49%, no regressions):\n\n- Inline the 20 i32/i64 comparison ops into the dispatch switch as\n  pop + in-\n[…]\nthe benchmark suite is flat (n=4) with instantiation\n7 allocations cheaper, and the full spec (including linking.wast) and\nWASI suites pass.\n\n* Tidy up module instantiation naming and comment wrapping",
          "is_bot": false,
          "headline": "Speed up the VM dispatch hot path (#85)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-07-09T15:10:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bc253d81b2cabe3c10a9b0501393426068b4232e",
          "body": "…#83)\n\n* Rework simd.go float lane ops and shared helpers\n\nFloat lane operations no longer take per-lane func values: they are\nwritten directly on top of small inlinable f32x4/packF32x4/f64x2/\npackF64x2 helpers, float comparisons build lane masks directly instead\nof round-tripping bools through NaN-\n[…]\nrage entirely.\n\nBenchmarks (n=6): geomean -2.60%, SortingMergeSort -5.5%, Indirect\n-2.7%, HostCall -1.1%, InstantiateSmall -10.2% time and one allocation\nfewer, InstantiateLarge -2.0%; no regressions.",
          "is_bot": false,
          "headline": "Remove the closure-based generic handlers from the VM dispatch loop (…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-12T21:21:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a77e23ec84da77b66cba8466de3cfd95dec1356",
          "body": "Replace the per-lane closure-dispatch helpers for the integer SIMD\ninstructions with branchless SWAR (SIMD-within-a-register) code that\noperates on both 64-bit halves of a V128Value at once.\n\nThe previous implementations looped over lanes calling a function value,\nwhich the compiler cannot inline, s\n[…]\nnline instead. The now-unused\ndispatch helpers are removed.\n\nResults (make bench-compare, 6 samples): IntegerVectorMath -6.68%, no\nsignificant change on the non-SIMD benchmarks, allocations unchanged.",
          "is_bot": false,
          "headline": "Speed up integer SIMD ops with SWAR implementations (#82)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-08T22:37:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "36ae767961c70fda27ba567eab1fd09b9327b0ff",
          "body": null,
          "is_bot": false,
          "headline": "Commit benchmark Wasm files and add CI drift check",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-08T21:08:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a765924f6c3c14340092a5e47522124da008d5a2",
          "body": "* Format benchmark C sources with clang-format and add a fmt-c target\n\nAdd a Google-style .clang-format and a fmt-c Make target, and reformat the\nbenchmark C sources to match. Also add a .clangd that silences the editor-only\n-Wunknown-attributes warning for the wasm-specific export_name attribute (t\n[…]\nment-wise integer operations across i8/i16/i32/i64 lane widths so the suite\nexercises the VM's integer SIMD opcode execution, which was previously almost\nentirely float-only.\n\n* update README, .clangd",
          "is_bot": false,
          "headline": "Format C benchmarks and add integer SIMD benchmark (#81)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-07T22:14:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3638965c88c6b80c0c36b9bc30110db51e7dcc95",
          "body": "* Format Markdown with mdformat and add a fmt-md target\n\nAdd a fmt-md Makefile target that wraps repo-owned Markdown to 80 columns\nwith mdformat, using the GFM plugin so tables survive and the frontmatter\nplugin so skill metadata is preserved. The file set comes from git ls-files\nso new docs are pic\n[…]\no the workflow, so unformatted Go or Markdown and vet\nissues block a merge instead of only being caught by the local review skill.\nuv and Go are already set up in the job, so no extra setup is needed.",
          "is_bot": false,
          "headline": "Format Markdown with mdformat and add a fmt-md target (#80)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-07T16:30:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "dcf0e928716509e4ef18b48adbf333721b51d40e",
          "body": "Add a project overview and layout map, a security rule, and a\ndefinition-of-done to AGENTS.md; correct the dependencies rule to allow the\ngolang.org/x modules; and trim generic guidance down to project-specific\nrules an agent cannot infer.\n\nIn the code-review skill, verify AGENTS.md stays current and point the\nproject-standards check at AGENTS.md instead of the removed .rules file.",
          "is_bot": false,
          "headline": "Restructure AGENTS.md and update the code-review skill",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-07T15:44:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8df74988687d3cc0aff960d6c296aeb597149f36",
          "body": "…laude Code\n\nRename .rules to AGENTS.md as the single source of truth and repoint CLAUDE.md\nat it. Drop the redundant GEMINI.md symlink since agy and the Gemini CLI both\nread AGENTS.md. Symlink .claude/skills to .agents/skills so Claude Code picks\nup the project skills that previously only Antigravity discovered.",
          "is_bot": false,
          "headline": "Make AGENTS.md the canonical agent rules file and share skills with C…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-07T14:53:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e32acfa0be686106d8f51011e933937bfe6bb54",
          "body": null,
          "is_bot": false,
          "headline": "Bump checkout and setup-go GitHub actions to v5",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-03T22:19:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9386c517931f7935660bd11415a2725a12d98401",
          "body": null,
          "is_bot": false,
          "headline": "Sync README CLI usage and make help text with actual output",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-03T22:19:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97b5e1f69048f096d3aee242a9d2de7a14dc25b0",
          "body": null,
          "is_bot": false,
          "headline": "Update golang.org/x/sys to v0.45.0 and normalize go directive to 1.25.0",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-03T22:10:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "87a6ace3e98c9aed1bde1b1e3c77295541e6578f",
          "body": "A host function receives its arguments as an args... slice. Two properties\nmust hold and were previously untested:\n\n  - Reentrancy: if a host function re-enters the VM and that triggers a\n    nested host call, the outer call's arguments must not be clobbered.\n  - Retention: a host may keep the args \n[…]\nrty on popValueTypes (its other caller, Invoke's results,\nrelies on it too), note it at the host call site, and add two tests that fail\nif a future change reuses a shared argument buffer across calls.",
          "is_bot": false,
          "headline": "Add tests documenting host-call argument isolation (#76)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-03T21:46:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "12b3de29319c17818cc195fdc012e2ed2ab88856",
          "body": "* Reduce module parsing allocations with a zero-allocation limited reader\n\nReplace the per-function bufio.Reader (which allocated a fresh 4KB buffer\nfor every function body) with a small limitedByteReader that caps reads to\nthe function size without any heap buffer. newParser now also reuses an\ninpu\n[…]\n, and the\n    errMissingEndOpcode result, instead of the sizeHint estimate essay.\n  - Trim duplicated and slightly inaccurate VM locals comments.\n  - Shorten the CallStackPreallocationSize config doc.",
          "is_bot": false,
          "headline": "Reduce parser and VM call-path allocations (#74)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-06-03T21:37:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "739f61cde8ac37116720ac227e569e53b6841d8e",
          "body": "Rewrite recursive and loop-heavy benchmark C programs to prevent LLVM optimizations from distorting performance metrics under -O3. Specifically, add volatile keywords and noinline/disable_tail_calls compiler attributes to guarantee that the WebAssembly call stack is properly exercised.\n\nShift execut\n[…]\n56 compression function execution for dense integer calculations\n\n- Host call round-trip overhead using an imported noop function\n\n- Module parsing, validation, and instantiation overhead measurements",
          "is_bot": false,
          "headline": "Harden and expand WebAssembly benchmarks suite (#73)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-27T20:50:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9172b20ac29eb335dea5944aed774d57cfb4550d",
          "body": "…s to wasi-sdk (#72)\n\n* Migrate benchmarks to WASI-SDK compilation and consolidate build, test, and documentation commands under Makefile\n\n* Implement strict local WABT auto-provisioning and path resolution in Go test runner\n\n* Remove redundant manual prerequisites from README.md\n\n* Switch docs and \n[…]\n text for wasm-related targets\n\n* Simplify WABT binary path resolution and trim wasip1 README\n\n* Rename internal/wabt/resolve.go to toolchain.go\n\n* Group test targets together and compact .PHONY block",
          "is_bot": false,
          "headline": "Add Makefile-based build/test/bench entry point and migrate benchmark…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-27T20:11:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "778ba7348e3a77f2aa8d75f89a820e9a53514036",
          "body": "…e (#71)\n\nWebAssembly/testsuite is the flat, auto-synced test mirror that\naggregates tests from the spec repo and the in-flight proposal repos.\nEvery test is a single .wast file in one directory, named with\nconventions that identify the proposal it covers, which makes\nproposal opt-in trivial.\n\nThe s\n[…]\ngle TestSpec that walks\ntestsuite/*.wast. The previous core/simd directory split disappeared\nwith the move to a flat layout; SIMD tests remain distinguishable by\ntheir filename prefix in t.Run output.",
          "is_bot": false,
          "headline": "Switch spec test source from WebAssembly/spec to WebAssembly/testsuit…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-27T14:02:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c35aefde28f9d28fbec268c19acd46fbdecc2b5",
          "body": "The previous 1.0.39 wast2json could not compile the typed function\nreferences spec tests (br_on_null, br_on_non_null, call_ref,\nreturn_call_ref, ref_as_non_null); 1.0.40 added support for those.\nAlso factor the version into a single shell variable so future bumps\ntouch one line.",
          "is_bot": false,
          "headline": "Bump WABT to 1.0.41 in CI",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-27T13:10:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a82b18ecc75054ae082639e144c69a038b43f1a",
          "body": "…mark iterations",
          "is_bot": false,
          "headline": "add security guidelines to code review skill and reduce default bench…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-22T16:01:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6b5e7a3eb43cf7e7a5c1293d4a0e188fd846f4dc",
          "body": "* Introduce runtime element and data instances\n\nThe store kept parser-side elementSegment/dataSegment values directly, so\nthe slices inside (functionIndexes, content, offsetExpression) shared\nbacking arrays with moduleDefinition. The current code only ever mutated\nthe store's slice headers, so the m\n[…]\ntSegment, and applyActiveDataSegment\nso the instantiation loops read as a simple filter / apply / drop sequence\nthat matches the rhythm of the surrounding import and global loops. No\nbehaviour change.",
          "is_bot": false,
          "headline": "Introduce runtime element and data instances (#70)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-22T15:24:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d5c641811b0f04fef1fcf8d2956245a1656998cd",
          "body": "* Add .antigravitycli to .gitignore\n\n* Optimize memory access by inlining bounds checks and direct binary operations",
          "is_bot": false,
          "headline": "Optimize memory access by using direct slice indexing (#69)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-19T21:45:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2364083da10eccc0a2dc68e8fe761c087ec1ab28",
          "body": null,
          "is_bot": false,
          "headline": "Link article URL to the word 'article' in CHANGELOG.md",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-19T07:30:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df1de44c938d4e37a32ce73fa5c0f23910d60eac",
          "body": null,
          "is_bot": false,
          "headline": "Release version 0.1.0",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-18T21:17:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2216b72184b2940240f57f622abbb312ebf3187",
          "body": "* Skip redundant stack unwind on block end and branch fall-through\n\nhandleEnd is only reached by normal fall-through to the end of a block\nor function, where validation guarantees the stack is already at\nstackHeight + outputCount. Drop the unwind and the getOutputCount lookup\nit depends on; just dis\n[…]\nhs in getInputCount\n\nEmpty (-0x40) and value-type block types both consume zero stack inputs,\nso a single 'blockType < 0' guard covers both cases. This is a clarity\nrefactor; benchmarks are unchanged.",
          "is_bot": false,
          "headline": "Performance improvement (#68)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-18T20:42:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "910eb2d7e554f26f87caaf2d0a2c9b8d6ed5b0ed",
          "body": "* Add configurable resource limits to Config\n\nA few-byte module could previously declare a multi-GiB table or\ntens of thousands of locals, forcing the runtime into oversized\nallocations before instantiation could be refused. Expose three\nceilings on Config (MaxTableElements, MaxMemoryPages,\nMaxLocal\n[…]\nine.\n- Re-greedy the prose for the fields whose wrap got tighter than it\n  needed to be, matching the original wrapping where the swap from a\n  literal default to a long constant name still allows it.",
          "is_bot": false,
          "headline": "Add configurable resource limits to Config (#67)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-17T09:02:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "71511467fa33854cbad6ef658f0a9943eb9cfe54",
          "body": null,
          "is_bot": false,
          "headline": "Add security audit skill definition",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-16T12:35:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a92c0ad1f3fa7312ac9c693587beff0623c94d5",
          "body": "…mpact of co-author trailers\n\nClaude Code auto-loads CLAUDE.md but not .rules, so the existing rules\nwere not in the agent's context at startup. Mirror the GEMINI.md\npattern with a CLAUDE.md -> .rules symlink.\n\nAlso expand the \"Commit Authors\" rule to spell out why agent\nco-author trailers are forbidden: they fail the cla/google check on\nthe PR, which already bit one branch.",
          "is_bot": false,
          "headline": "link CLAUDE.md to .rules so agent rules auto-load, and document CLA i…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-16T10:42:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de9e7a2e1dd9e13a69824165bc229ae92022f6ab",
          "body": "* cap parseVector pre-allocation to bound attacker-controlled counts\n\nparseVector previously did make([]T, count) where count is parsed\ndirectly from the WASM binary, allowing a few-byte module to request\na multi-GB allocation. Switch to make([]T, 0, min(count, 4096)) plus\nappend: in the common case\n[…]\nation surfaces\nas ErrUnexpectedEOF before runaway growth). For readImmediateVector,\nmirror the parseVector fix: cap the initial slice capacity and\nappend, letting EOF in the inner read bail out early.",
          "is_bot": false,
          "headline": "Cap attacker-controlled pre-allocations in the parser (#66)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-16T10:38:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eb57397c45e77abf4a28805ac6a790784e5c5450",
          "body": null,
          "is_bot": false,
          "headline": "document concurrency model.",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-16T09:53:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1f58028d817393358a7c7d88d28ae8ed7fba6fe",
          "body": "The previous implementation masked negative blocktype values with 0x7f, so\ncanonical multi-byte SLEB128 encodings of values like -129 (0xff 0x7e) were\nsilently coerced to a valtype (i32 in this case) instead of being rejected.\nMatch the spec by enumerating the legal negative codes (valtypes plus -64\nfor empty) and treating anything else as invalid.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix block type validation to reject non-canonical SLEB128 encodings",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-16T09:28:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ace9955a6b236df430977b9141d620ec53d578d3",
          "body": "The typed select instruction must have a vector of exactly one valtype.\nThe previous code accepted any vector length, underflowed v.pc when size\nwas zero, and silently dropped extra types when size was greater than one.\nAlso reject unknown type codes so they don't fall into the polymorphic\nuntyped-select path.",
          "is_bot": false,
          "headline": "fix select t* validation to require exactly one result type",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-16T09:09:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da2b1398edfdbaf90cace41a1eee56cc04c2acf4",
          "body": "handleTableInit previously trapped on any table.init against an active\nor declarative segment (even with n=0) and ignored passive segments\nwhose entries were encoded as constant expressions, so a passive segment\ncontaining ref.null (case-5 binary encoding) silently failed to copy.\n\nResolve every ele\n[…]\no\nbranch on encoding form. handleTableInit becomes a single dispatch on\nmode, and initActiveElements collapses into applyActiveElementSegments.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix table.init handling of dropped and expression-form element segments",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-16T08:50:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "44baf95469c1df549d89455dffebbbbd8e0807a4",
          "body": "Replaces the allocate-then-copy pattern with a direct slice into wasm\nmemory via memory.Get. Removes a per-call allocation and copy, performs\nthe destination bounds check upfront, and avoids unbounded Go-side\nallocations driven by guest-controlled length values.",
          "is_bot": false,
          "headline": "write directly into wasm memory in iterIovec and randomGet",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-15T23:06:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1cdb8e15d425b075f29f1c0c8c3d2dc748341a1a",
          "body": null,
          "is_bot": false,
          "headline": "fix multiple validation cases where we were far too permissive",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-15T20:05:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "483df64e7ac2139345744a8c3088363f9b0b768e",
          "body": null,
          "is_bot": false,
          "headline": "fix global import type validation logic",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-15T19:55:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ba129b21ca82dfbbf6727dd5418f3c30d1bcade",
          "body": "fd_pread and fd_pwrite require RightsFdSeek per the WASI spec (they take\nan explicit offset, implying non-sequential access), but only checked\nRightsFdRead/RightsFdWrite. Added the missing RightsFdSeek check to both.\n\npoll_oneoff only checked RightsPollFdReadwrite regardless of event type.\nAdded RightsFdRead for read subscriptions and RightsFdWrite for write\nsubscriptions. Also gated the nbytes Stat() call on RightsFdFilestatGet\nto prevent leaking file size to modules lacking that capability.",
          "is_bot": false,
          "headline": "Fix WASI rights bypass in pread, pwrite, and poll_oneoff (#65)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-15T18:01:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4e57f1169ee89b48657922238315e6bf56e24e7",
          "body": "The existing note only mentioned files/directories being always reported\nready, leaving out that sockets behave the same way. Modules polling a\nsocket for incoming data will busy-loop at 100% CPU. Spell this out\nexplicitly so users aren't surprised.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: clarify poll_oneoff busy-loop risk for sockets",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-15T17:50:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f2c764cd4f8bc9feec0e2df28e3338730f67ac6b",
          "body": "bufio.Reader wrapping io.LimitReader in parseFunction could pre-fetch\nbytes beyond what the parser consumed, causing the outer reader to resume\nat the wrong offset after the function body. Drain remaining bytes after\nreadCode to ensure the stream is always advanced by exactly the declared\nfunction size.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix parser buffer desynchronization via bufio over-read",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-15T17:46:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "943d38ce5eeb391bfcf1f93b7541d39a35a12207",
          "body": "* remove builder methods to add config to a runtime.\n\nThis allows the vm attached to a runtime to be immediately created, rather than lazily, which is necessary for some further hardening we are planning to do.\n\n* Store the vm instance in Memory, Table, Global instances.\n\nThis pointer acts as a toke\n[…]\nsafe isolation for runtimes.\n\n* move validation more internally, include functions\n\n* refactor: simplify global variable initialization and add interface-based VM ownership check to function instances",
          "is_bot": false,
          "headline": "Cross Runtime isolation (#64)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-15T17:29:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1eedd08c96b226bc0268cbb4aae155b42df12264",
          "body": "* Implement WASI side-channel mitigation by rounding clock timestamps and timeouts\n\n* Prioritize WASI spec compliance by using high-resolution clocks\n\n* Clean up redundant clock rounding logic\n\n* Simplify getTimestamp returns\n\n* format",
          "is_bot": false,
          "headline": "WASI: Prioritizing Spec Compliance for Clocks and Polling (#63)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-10T21:00:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e13edd06ae99369acbd0077bbd8718b89d40bd3",
          "body": "* Fix uninitialized reference local leak\n\n* Update test to explicitly expect trap\n\n* Minor test tweaks\n\n* formatting",
          "is_bot": false,
          "headline": "Fix Uninitialized Reference Local Leak (#62)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-10T20:40:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "297a8ccde0638622b7126e37f77b24d6dfadfcb9",
          "body": null,
          "is_bot": false,
          "headline": "Fix host function stack underflow vulnerability (#61)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-10T20:15:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ac96a55a11400085717f67cae6a3eb16115ff05",
          "body": null,
          "is_bot": false,
          "headline": "Validate reference type arguments in ModuleInstance.Invoke (#60)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-10T19:57:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f03ebb37923e2e0617a81f7b60262feba4af6af8",
          "body": null,
          "is_bot": false,
          "headline": "formatting",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T15:14:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d95453c38ee3fc71bf515bca8e623aeacb03c7c4",
          "body": null,
          "is_bot": false,
          "headline": "Fix WASI clock implementation flaws (#59)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T15:07:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db9b97022f4387cdad6f1fa58062d3a747f814d3",
          "body": null,
          "is_bot": false,
          "headline": "Fix WASI poll_oneoff clock timeout overflow (#58)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T15:02:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52c5234e346298e8ab7586a1d9fb89bd93d7b519",
          "body": "* Fix input validation and FD leak in WASI host functions\n\n* Remove large reproduction test file",
          "is_bot": false,
          "headline": "Fix Input Validation Failures and FD Leak in WASI Host functions (#57)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T14:51:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17e2d88b5e62ab3de3f05ecf58987438288a875d",
          "body": "* Fix WASI rights escalation and capability bypass\n\n* Rename vulnerability tests to wasi_resources_test.go",
          "is_bot": false,
          "headline": "Fix WASI rights escalation and capability bypass (#56)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T14:41:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2a08c23602806f4567b97c91cfe354ac1d388bb",
          "body": "* Remediate integer overflows in table and memory operations\n\n* Remove reproduction tests for VULN-10, 11, 12\n\n* Remove PR description scratch file",
          "is_bot": false,
          "headline": "Remediate Table and Memory Integer Overflows (#55)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T14:20:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df5cf437722f7c6d92692bb1f5f2659c13a483fd",
          "body": "* Fix memory index validation bypass in load/store instructions\n\n* Refactor TestMemoryIndexValidation to use a single byte slice\n\n* Apply formatting to validation_test.go",
          "is_bot": false,
          "headline": "Fix memory index validation bypass in load/store instructions (#53)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T13:55:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6d1c3212668e5bdf416899c9ae7d8f37b198408",
          "body": "* Remediate VULN-06: Add bounds checking for block type indices\n\n* Clean up VULN-06 test: use raw bytes and remove unnecessary recovery\n\n* Minor formatting cleanup in TestVuln06",
          "is_bot": false,
          "headline": "Add bounds checking for block type indices (#52)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T13:40:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19d0ffd53bb6a5b2b8e3e65810de1296b93baeed",
          "body": "…mediate values as end opcodes (#51)",
          "is_bot": false,
          "headline": "fix: improve end-of-function validation to prevent misinterpreting im…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T13:27:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4833b535846e7a9251e9d7a10734c7ad04ed584e",
          "body": "…VM isolation (#50)",
          "is_bot": false,
          "headline": "feat: prevent forbidden cross-runtime function imports by validating …",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T13:08:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bea4a0cec53d5977576d129caea789c6b0563873",
          "body": "…tions (#49)",
          "is_bot": false,
          "headline": "feat: validate funcref arguments to prevent access to unexported func…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T12:40:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a310ecbf6f2a41203d6171aae7bc8125291db99f",
          "body": "* add tests for vuln1, vuln2\n\n* fix vuln2\n\n* fix Stack Corruption via return Instruction",
          "is_bot": false,
          "headline": "Fix stack-related vulnerabilities (#48)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-05-09T11:03:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80b403a809bb70d8bf320cbca151dcb9bf605c2d",
          "body": null,
          "is_bot": false,
          "headline": "unify how agents discover skills (#47)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-03-01T14:59:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1765d3dd7a8047e51b7f06be554addc8f2a8063b",
          "body": "* Simplify SIMD float operations and add benchmark filtering\n\n* Add UTF-8 encoding when writing benchmark results and simplify the CLI description.\n\n* Remove unused simdF32x4Copysign\n\n* simplify floating-point type conversions in SIMD demotion and promotion functions.\n\n* Add validation for each SIMD\n[…]\naceLane` functions for improved SIMD lane manipulation.\n\n* refactor: Remove `extractLane` helper and directly implement SIMD lane extraction and storage with bitwise operations.\n\n* add missing newline",
          "is_bot": false,
          "headline": "Simplify some SIMD operations (#46)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-14T18:27:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4e853982e3c4c92b24527adad8646e7c3e4ed4e0",
          "body": null,
          "is_bot": false,
          "headline": "Add SIMD vector math benchmark",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-14T14:39:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f72c4d8e708cb0a411a55c308897751ac24e7a59",
          "body": "…ate all call sites.",
          "is_bot": false,
          "headline": "refactor: rename `invokeInitExpression` to `invokeExpression` and upd…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-13T22:20:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98bdcb5ff15c99954807fb9db74d59428b1c6948",
          "body": "…m.go`.",
          "is_bot": false,
          "headline": "refactor: remove redundant non-negative index check for `index` in `v…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-13T22:16:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3187c9e8da814724d9752b7987b7ca194d29d8b",
          "body": null,
          "is_bot": false,
          "headline": "remove more type conversions",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-13T21:41:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23844cafda566cfed34742a9b8e03b773e32cd35",
          "body": null,
          "is_bot": false,
          "headline": "use uint64 as indexes to avoid pointless conversions",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-13T21:10:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ff08258835eeb57b8b5d8acf31351b2bc89adf1",
          "body": null,
          "is_bot": false,
          "headline": "infline getFunction",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-13T21:06:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84e2ce230cf7901e953a20eab839cc5f38c933cb",
          "body": "…sys_unix.go",
          "is_bot": false,
          "headline": "simplify error returns in validation.go and fix comment typo in wasi_…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-13T09:11:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0dec405cc7e9978d5d828cee5593a6dc849db848",
          "body": "…go`.",
          "is_bot": false,
          "headline": "remove unused argument from `moduleInstance.Invoke` call in `vm_test.…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-08T16:37:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "702d96c0326bdebafd849999dcc41e7570406c49",
          "body": "* parser errors\n\n* pushAll\n\n* vm errors\n\n* validation errors\n\n* instance errors\n\n* one more err\n\n* inline getrange",
          "is_bot": false,
          "headline": "touch up errors (#44)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-08T01:29:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e029be8563639ca1a1a755d26c40726af1cffd3",
          "body": "* Implement instruction fuel (gas) mechanism\n\n* format code review skill\n\n* Clarify default values in Config documentation\n\n* do not mutate configs\n\n* inline the loops, inline the number of instructions per function\n\n* Revert \"inline the loops, inline the number of instructions per function\"\n\nThis reverts commit 9590ace427c8de4cbc44c0007d7df0b574ea3a13.",
          "is_bot": false,
          "headline": "Implement Instruction Fuel (Gas) Mechanism (#40)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-07T23:57:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "faf742aed06dc18a96a25fad213e501ff75c5cca",
          "body": "* Update benchmark comparison script to use benchstat\n\n* Improve benchmark stability by interleaving runs and pinning to CPU\n\n* delete a bunch of unnecessary stuff\n\n* indentation\n\n* fix compare on macOS\n\n* add count option\n\n* clarify indirect dependencies are used by benchstat, not the actual vm",
          "is_bot": false,
          "headline": "Improve benchmark comparisons stability (#43)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-07T21:11:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d76ba13b550268edcffb4ccb51c2eaa1ad3f2949",
          "body": "* Fix sorting benchmark state persistence and increase data size\n\n* fix compare script to report regression from 0",
          "is_bot": false,
          "headline": "Fix sorting benchmark state persistence and increase data size (#42)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-07T17:36:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96a6f146fe110fead0aca3fe9ebeeaacec38b491",
          "body": "…g test (#41)",
          "is_bot": false,
          "headline": "Clarify symlink resolution comments and add intermediate file blockin…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-07T15:59:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "974540e72351f464a84fad0d10f237145a674ab0",
          "body": null,
          "is_bot": false,
          "headline": "add a code review skill",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-03T23:31:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bcb801158dc6a5fd203202af3cd0ae7df6e0cc79",
          "body": "* Document CLI options\n\n* Remove Release section from README",
          "is_bot": false,
          "headline": "README fixes (#39)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-03T22:40:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ba134e82ac8d7dbfab8fc339fe45f7eda5916b2",
          "body": "* delete the repl\n\n* Simplify things\n\n* simplify cli help string\n\n* use flag.Func\n\n* inline",
          "is_bot": false,
          "headline": "Delete REPL, improve the CLI (#38)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-01T23:50:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6238e496be330ea9e37ffaecf3be9a9869cf9056",
          "body": null,
          "is_bot": false,
          "headline": "Release version 0.0.4",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-01T01:55:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "77e4aaa8d6142503aaf0ee42d27fb1c59581fe47",
          "body": "This skill guides the agent through the release process, including version determination, verification (build, test, benchmarks), changelog generation, and git tagging.",
          "is_bot": false,
          "headline": "Add release skill",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-02-01T01:44:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e1ecfcd3ccd750bc6278495bcbe39f4dd83e4692",
          "body": "- Add StartFunctionName, MemoryExportName, ModuleName constants to wasip1\n- CLI now invokes _start by default when no function is specified\n- Update README example to use wasip1.StartFunctionName",
          "is_bot": false,
          "headline": "Add WASI ABI constants and default to _start entry point",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-31T23:26:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb424e38914f4f01700978b9f732dc390df398b8",
          "body": null,
          "is_bot": false,
          "headline": "Update .rules to prohibit agent co-authorship on commits",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-31T22:46:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3fb1f9b68feaafe461f8a46ed74784ad35f755c",
          "body": "* Refactor WASI module API to use builder pattern\n\n- Replace WasiConfig struct with WasiModuleBuilder\n- Implement fluent builder API with WithArgs, WithEnv, WithDir, etc.\n- Update wasi_unix.go and wasi_stub.go with builder implementations\n- Update main.go CLI to use new builder pattern\n- Update READ\n[…]\nedundant cleanup from newWasiResourceTable to prevent double-close\n- Stub implementation now stores and closes files to honor the contract\n\n* resolve module asap\n\n* remove newline\n\n* WithEnvMap\n\n* cmp",
          "is_bot": false,
          "headline": "Use a builder to construct WASI modules (#37)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-31T22:44:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b30ea2d4ce370ee96de7c6cd3b18b540b92a2f8c",
          "body": null,
          "is_bot": false,
          "headline": "Fix WASI test command in README.md",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-23T17:34:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e47115b94b8d02441a59aed8d0d76c21359b5692",
          "body": "… a non relative path",
          "is_bot": false,
          "headline": "Return syscall.EPERM rather than os.ErrInvalid when tryint to resolve…",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-04T17:25:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "79b2af8b7f369266c868811a2b8d1cbeb2961909",
          "body": null,
          "is_bot": false,
          "headline": "Fix OpenBSD utimeNow constant",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-04T12:53:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e39d514da26050e161abd4f5c548cf3ab0a800db",
          "body": "* Use Python to run WASI tests\n\n* Use '=' as separator for --dir argument for Windows compatibility\n\nOn Windows, absolute path themselves contain ':'\n\n* Fallback to os.Open when trying to open a path\n\nThis is again necessary for Windows where absolute paths would otherwise fail",
          "is_bot": false,
          "headline": "A few initial infra changes to better support Windows (#35)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-03T19:40:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ff3560e77196c02ce73abb351c3839977d3c873",
          "body": "* Whops, WASI test suite already comes with pre-built wasm binaries in another branch\n\n* Run WASI spec tests natively\n\n* Fix utimeOmit on macOS (and other UNIXes though they were not tested)\n\n* Use utimeNow rather than manually fetching the current time\n\n* Run WASI tests in Github actions\n\n* Remove submodule init in wasi_tests\n\n* Touch up the READMEs",
          "is_bot": false,
          "headline": "Run WASI test suite natively, fixes bug on macOS (#34)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-03T16:59:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0376abe7c00d73af87209d85f36329a10db73e89",
          "body": null,
          "is_bot": false,
          "headline": "Reduce docker image size by ~ 1 GB",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-03T13:24:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12d70b806e648cef4b5f59a3e1219d40ad6ca598",
          "body": null,
          "is_bot": false,
          "headline": "Fix incorrect sleep times in wasi_poll",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-02T17:21:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1502d966f9ae546e009a788b89adfba444d173a9",
          "body": null,
          "is_bot": false,
          "headline": "Simplify wasi_poll",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-02T16:38:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8c62fb92e551b42ca37c698cfe45754089723d27",
          "body": null,
          "is_bot": false,
          "headline": "Delete dead code and pointless comments",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-02T16:09:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "527dbf5518c9f39f1e507a32ce7129d52c1495ac",
          "body": null,
          "is_bot": false,
          "headline": "Remove dot",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-02T00:17:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cff8ad1e0fa4b7a09552554d17e1902de882ca18",
          "body": "* Simplify splitPath, mapError\n\n* Delay trailing slash checks\n\n* Flatten resolvePath\n\n* Simplify walkToParent\n\n* Remove unused argument in walkToParent, merge link resolution into resolveSymlink\n\n* Fix datasync\n\n* Remove a bunch of err checks\n\n* Unify readlinkat\n\n* Pass memory rather than module instance to pollOneoff",
          "is_bot": false,
          "headline": "Wasi cleanup (#33)",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-02T00:07:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f3668f370ab3753bc8459bd00da4f8997aefb8e",
          "body": null,
          "is_bot": false,
          "headline": "Mention WASI in the main README",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T17:24:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f712d7c33985b734bfa326a37f059761ef2dd3b",
          "body": null,
          "is_bot": false,
          "headline": "Add WASI specific README",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T17:20:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db9f32085097b8f35ccb331e784a434517ac5ae3",
          "body": null,
          "is_bot": false,
          "headline": "Allow Windows builds, though Windows is unsupported",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T16:51:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12f37c357942f8b125ca50e236d848d756618478",
          "body": null,
          "is_bot": false,
          "headline": "Move unix only things to wasi_sandbox",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T16:35:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a3f4f15a38e813b645f3bbea1147b748183b54b",
          "body": null,
          "is_bot": false,
          "headline": "Allow overriding stdin/out/err, fix subscriptions layout",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T16:12:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6e3488818c2fbb22f5fd9a0628422dbfeade318",
          "body": null,
          "is_bot": false,
          "headline": "proc_exit should exit the WASM code, not turn down the whole Go process",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T15:27:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2556a8557c539a4278eb01bca011d5b4f9948aca",
          "body": null,
          "is_bot": false,
          "headline": "Bind",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T14:31:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd9c13d08d661567907e8daddd67dd5ba079d2c6",
          "body": null,
          "is_bot": false,
          "headline": "Fix last failing WASI spec test",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T14:10:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95e0a02690bfef90d35a63f39302fa934623836d",
          "body": "Thanks Gemini 3.0 Pro. I would have never found this issue on my own.",
          "is_bot": false,
          "headline": "Fix one more spec test",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T14:01:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ca5a129ac5194c3534513c9191865e7fc80a8d4",
          "body": null,
          "is_bot": false,
          "headline": "Fix style",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T13:42:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c4c3d406b2ddf8278a8a52f6ee4f5af2027e3ac",
          "body": null,
          "is_bot": false,
          "headline": "Fix one more WASI tests",
          "author_name": "Andrea Pivetta",
          "author_login": "ziggy42",
          "committed_at": "2026-01-01T11:32:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 6,
      "commits_last_year": 193,
      "latest_release_at": "2026-07-09T15:44:10Z",
      "latest_release_tag": "v0.1.1",
      "releases_from_tags": true,
      "days_since_last_push": 16,
      "active_weeks_last_year": 18,
      "days_since_latest_release": 16,
      "mean_days_between_releases": 42.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/ziggy42/epsilon",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/ziggy42/epsilon",
          "is_deprecated": false,
          "latest_version": "v0.1.1",
          "repository_url": "https://github.com/ziggy42/epsilon",
          "versions_count": 6,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-09T15:44:10Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 16
        }
      ]
    },
    "popularity": {
      "forks": 11,
      "stars": 434,
      "watchers": 5,
      "fork_history": {
        "days": [
          {
            "date": "2025-12-02",
            "count": 1
          },
          {
            "date": "2025-12-09",
            "count": 6
          },
          {
            "date": "2025-12-10",
            "count": 1
          },
          {
            "date": "2025-12-11",
            "count": 1
          },
          {
            "date": "2026-05-21",
            "count": 1
          },
          {
            "date": "2026-06-02",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 11,
        "total_forks": 11
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "example"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 64795,
      "source_files_sampled": 54,
      "oversized_source_files": 1,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2290
    },
    "dependencies": {
      "manifests": [
        "go.mod",
        "pyproject.toml",
        "requirements.txt"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "golang.org/x/sys",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 66,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 9,
        "closed_unmerged_prs": 10
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "ziggy42",
          "commits": 191,
          "avatar_url": "https://avatars.githubusercontent.com/u/4258550?v=4"
        },
        {
          "type": "User",
          "login": "deadprogram",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/5520?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.995
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "go.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "uv.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 0,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "cfa0c9435331a4ab6ad83290c54c8b3be4a82f9d",
        "ran_at": "2026-07-25T16:23:56Z",
        "aggregate_score": 3.6,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-09T15:45:23Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-09T15:10:07Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/ziggy42/epsilon",
    "host": "github.com",
    "name": "epsilon",
    "owner": "ziggy42"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 60,
      "inputs": {
        "security": 36,
        "vitality": 77,
        "community": 61,
        "governance": 59,
        "engineering": 61
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 77,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "commits_last_year": 193,
              "human_commit_share": 1,
              "days_since_last_push": 16,
              "active_weeks_last_year": 18
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 16 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 16
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "18/52 weeks with commits",
                "points": 12.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 18
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "193 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 193
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "releases_count": 6,
              "latest_release_tag": "v0.1.1",
              "releases_from_tags": true,
              "days_since_latest_release": 16,
              "mean_days_between_releases": 42.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "6 version tags (no GitHub releases)",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "version_tags_no_releases",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 16 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 16
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~42.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 42.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 16,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 16 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 16
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 61,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "forks": 11,
              "stars": 434,
              "watchers": 5,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "434 stars",
                "points": 42.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 434
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "11 forks",
                "points": 8.3,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "5 watchers",
                "points": 3.3,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 59,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 15,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.995
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "merged_prs": 66,
              "open_issues": 0,
              "closed_issues": 9,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 10
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "66/76 decided PRs merged",
                "points": 33.2,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 66,
                      "decided": 76
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "followers": 58,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "ziggy42",
              "public_repos": 41,
              "account_age_days": 4838
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "58 followers of ziggy42",
                "points": 12.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 58,
                      "login": "ziggy42"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "41 public repos, account ~13 yr old",
                "points": 23.8,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 41
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 13
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/ziggy42/epsilon"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 16
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 16 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 16
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "6 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 61,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [
                "wasm",
                "golang",
                "go",
                "webassembly",
                "webassembly-runtime"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "5 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 36,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 36,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 3.6
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 71,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "good",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.58,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2290
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "58 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 30.9,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 58,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "uv.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.04,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "4 of the last 100 commits agent-authored or agent-credited",
                "points": 8,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 4,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 64795,
              "source_files_sampled": 54,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/54 source files over 60KB",
                "points": 54,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 54,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "example"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "example",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "example"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Could not fetch pypi package 'epsilon-scripts' from its registry",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T16:24:06.573410Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/z/ziggy42/epsilon.svg",
  "full_name": "ziggy42/epsilon",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаGo.