公开记录
软件健康报告模式 0.27.0 · 指标 1.13.0 · 2026-07-25 02:39 UTC

BRF-Tech / filex

filex - self-hosted file manager. Go backend + Vue 3 / React / Web Component frontend. Pluggable storage (local, S3, SFTP, WebDAV, FTP), auth (local, OIDC, LDAP, proxy-header) and DB drivers. Single binary or container. MIT.

Go · Vue · TypeScriptMIT★ 2 星标⑂ 0 复刻始于 2026年7月在 GitHub 上查看 ↗
#docker#file-browser#file-manager#file-sharing#golang#mcp#multi-tenant#react#s3#self-hosted#sftp#vue#web-components#webdav

BRF-Tech/filex 的健康指数为 100 分中的 58 分，处于「中等」区间。 其得分最高的类别是Engineering Quality（89/100），最低的是Security（29/100）。 最近一次更新在 5 天前。 近期的大部分工作由 1 位贡献者完成。

58
总分 / 100
中等

软件健康指数

指标归入加权类别，统一采用 1–100 量表。总体分先取类别加权平均；当公开证据触发高风险司法辖区政策时，评级会按政策调整，并设置 49（有风险）的上限。AI 就绪度不计入总体分。

58
优秀85-100堪称典范；基本满足所有检验标准
良好70-84健康；仅有轻微不足
中等50-69可接受，但存在明显不足；建议进行审查
存在风险30-49存在重大薄弱环节；采用时应保持审慎
危急1-29问题严重（项目被弃置、仅有单一维护者、缺乏基本工程规范）
活力社区与采用可持续性与治理工程质量安全AI 就绪度

评分画像

每条轴代表一个类别。形状比平均值更重要——健康的对象会填满整个图形，而“一峰一谷”式画像意味着某一维度的优势正掩盖另一维度的风险。

所有权

BRF Tech组织
1 关注者2 个公开仓库始于 2024年2月

该仓库由组织支持——共同承担、可问责的托管责任，可延续于任何单一维护者之后。

软件包生态系统

注册表软件包版本月下载量版本数最近发布
Gogithub.com/BRF-Tech/filexv0.7.5-415 天前

按类别列示的指标

活力

项目是否仍有生命——是否仍在编写代码，是否仍在发布版本？

69中等 · 占总体的 22%

开发活跃度

55中等
评分方式
36/36推送新近度 — 最近一次推送于 5 天前
2.8/36提交节奏 — 52 周中有 4 周有提交
16/18提交量 — 最近一年 59 次提交
0/10OpenSSF Scorecard：Maintained — project was created within the last 90 days. Please review its contents carefully
所用输入
commits_last_year59
human_commit_share1
days_since_last_push5
active_weeks_last_year4

发布纪律

90优秀
评分方式
27/27有发布版本 — 已发布 41 个发布版本
36/36发布时效 — 最近一次发布版本于 5 天前
27/27发布节奏 — 约每 0.2 天发布一次
0/10OpenSSF Scorecard：Signed-Releases — Project has not signed or included provenance with any releases.
所用输入
releases_count41
latest_release_tagv0.7.5
releases_from_tags否
days_since_latest_release5
mean_days_between_releases0.2

社区与采用

项目是否拥有用户、下载量与关注度，并具备欢迎贡献者参与的配置？

43存在风险 · 占总体的 18%

流行度与采用

1危急
评分方式
0/60星标 — 2 个星标
0/25复刻 — 0 个复刻
0/15关注者 — 0 位关注者
所用输入
forks0
stars2
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

社区健康

92优秀
评分方式
22.5/22.5README
22.5/22.5许可证 — 可识别的许可证（MIT）
18/18CONTRIBUTING 指南
13.5/13.5行为准则
0/7.2议题模板
6.3/6.3PR 模板
所用输入
has_readme是
has_license是
has_contributing是
has_issue_template否
has_code_of_conduct是
has_pull_request_template是

可持续性与治理

项目能否在其成员之外延续——巴士系数、响应能力、由谁支持，以及软件包的维护状况？

54中等 · 占总体的 24%

维护者韧性（巴士系数）

10危急
评分方式
9/54巴士系数 — 1 位贡献者贡献了半数提交
0/22.5提交分布 — 头号贡献者编写了 100% 的提交
1.4/13.5贡献者广度 — 1 位贡献者
0/10OpenSSF Scorecard：Contributors — project has 0 contributing companies or organizations -- score normalized to 0
所用输入
bus_factor1
contributors_sampled1
top_contributor_share1

议题与 PR 响应能力

85优秀
评分方式
46.8/46.8议题解决 — 100% 的议题已关闭
38.2/38.3PR 接受 — 已裁定的 PR 中 1/1 已合并
0/15OpenSSF Scorecard：Code-Review — Found 0/30 approved changesets -- score normalized to 0
所用输入
merged_prs1
open_issues0
closed_issues4
issue_closed_ratio1
closed_unmerged_prs0

所有权与托管责任

41存在风险
评分方式
30/30所有权背书 — 组织持有
0/20已验证域名
2.2/25所有者影响力 — BRF-Tech 有 1 位关注者
8.4/25既往记录 — 2 个公开仓库，账户约 2 年
所用输入
followers1
owner_typeOrganization
is_verified—
owner_loginBRF-Tech
public_repos2
account_age_days892

软件包维护

100优秀
评分方式
25/25已发布且可解析 — go 上有 1 个软件包
35/35发布时效 — 最近一次发布于 5 天前
20/20版本历史 — 41 个已发布版本
20/20未被弃用 — 活跃，未被弃用或撤回
所用输入
packagesgithub.com/BRF-Tech/filex
ecosystemsgo
any_deprecated否
min_days_since_publish5

工程质量

基础的工程与文档实践是否到位？

89优秀 · 占总体的 20%

工程实践

88优秀
评分方式
24/24CI 工作流 — 2 个工作流
24/24存在测试
16/16Linter 配置 — eslint.config.js
0/9.6Pre-commit 钩子
6.4/6.4.editorconfig
0/20OpenSSF Scorecard：CI-Tests — 无数据
所用输入
has_ci是
has_tests是
has_editorconfig是
has_linter_config是
has_precommit_config否
已排除计分（无数据或不适用）：OpenSSF Scorecard：CI-Tests。 其余权重已重新归一化。

文档

90优秀
评分方式
30/30README
25/25文档目录
15/15文档 / 主页站点 — https://filex.sh
10/10仓库描述
10/10主题标签 — 14 个主题标签
0/10Wiki
所用输入
topicsdocker, file-browser, file-manager, file-sharing, golang, mcp, multi-tenant, react, s3, self-hosted, sftp, vue, web-components, webdav
has_wiki否
homepagehttps://filex.sh
has_readme是
has_docs_dir是
has_description是

安全

可见的安全与供应链实践是否稳固，且不存在未解决的高风险司法辖区暴露？

29危急 · 占总体的 16%

安全态势

29危急
评分方式
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — 无数据
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5许可证 — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — no SAST tool detected
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 101 existing vulnerabilities detected
所用输入
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate2.9
已排除计分（无数据或不适用）：ci_tests。 其余权重已重新归一化。

AI 就绪度

该仓库在多大程度上具备与 AI 编码代理协同开发与维护的条件？这是一枚独立的实验性徽章——权重为 0.0，因此单独呈现，不影响总体健康评分。

67中等 · 占总体的 0%

AI 代理上下文与指引

40存在风险
评分方式
0/45代理指令 — 没有 CLAUDE.md / AGENTS.md / 编辑器规则
0/15机器可读文档（llms.txt）
40/40可读的提交历史 — 59 次人类提交中有 59 次说明了意图（结构化标题或解释性正文）
所用输入
has_llms_txt否
legible_history_share1
agent_instruction_files—
agent_instruction_max_bytes—

验证循环（构建 / 测试 / 类型检查）

77良好
评分方式
12.6/18一条命令的引导启动 — backend/go.mod（工具链约定，无任务运行器）
22/22自动化测试
11/11Lint / 格式化配置 — eslint.config.js
11/11静态类型检查 — e2e/tsconfig.json, packages/core/tsconfig.json, packages/react/tsconfig.json, packages/webcomponent/tsconfig.json, web/tsconfig.json
10/10可复现环境 — Dockerfile, lockfile
10/10已体现的代理实践 — 最近 59 次提交中有 32 次由代理编写或署名代理
0/8自动化维护 — 未观察到自动依赖更新
0/10OpenSSF Scorecard：Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
所用输入
has_nix否
has_tests是
lockfilesgo.sum, pnpm-lock.yaml
has_dockerfile是
typed_language是
bootstrap_files—
has_devcontainer否
has_linter_config是
typecheck_configse2e/tsconfig.json, packages/core/tsconfig.json, packages/react/tsconfig.json, packages/webcomponent/tsconfig.json, web/tsconfig.json
agent_commit_share0.542
toolchain_manifestsbackend/go.mod
dependency_bot_commit_share0

面向模型的代码可读性

100优秀
评分方式
45/45可类型检查的代码 — Go（静态类型）
54.8/55可控的文件大小 — 采样的 453 个源文件中有 2 个超过 60KB
所用输入
primary_languageGo
largest_source_bytes117,418
source_files_sampled453
oversized_source_files2

机器可读接口

60中等
评分方式
0/40API 模式（OpenAPI/GraphQL/proto）
20/20MCP 服务器
40/40可运行示例 — notebooks
所用输入
example_dirsnotebooks
has_mcp_signal是
api_schema_files—

关键数据

2GitHub 星标
1贡献者
59最近 12 个月提交数
5距最近推送天数
41发布版本数
1巴士系数（bus factor）
0开放议题
Go, npm软件包生态系统数

数据采集警告

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

更多细节

OpenSSF Scorecard 2.9 / 10
2.9综合

来自开源项目 OpenSSF Scorecard 的独立、工具无关的安全评估。每项检查奖励的是安全实践本身，而非特定供应商的工具。Scorecard 无法判定的检查项标记为 不适用，并从安全评分中剔除（绝不按零分计）。Scorecard v5.5.0 · 2026-07-25 02:39 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
不适用CI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTno SAST tool detected
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities101 existing vulnerabilities detected
直接依赖 43
注册表软件包版本约束清单文件
Gogithub.com/aws/aws-sdk-go-v2v1.30.3backend/go.mod
Gogithub.com/aws/aws-sdk-go-v2/configv1.27.27backend/go.mod
Gogithub.com/aws/aws-sdk-go-v2/credentialsv1.17.27backend/go.mod
Gogithub.com/aws/aws-sdk-go-v2/service/s3v1.58.2backend/go.mod
Gogithub.com/blevesearch/bleve/v2v2.4.2backend/go.mod
Gogithub.com/blevesearch/bleve_index_apiv1.1.10backend/go.mod
Gogithub.com/coder/websocketv1.8.15backend/go.mod
Gogithub.com/coreos/go-oidc/v3v3.11.0backend/go.mod
Gogithub.com/fatih/colorv1.17.0backend/go.mod
Gogithub.com/fsnotify/fsnotifyv1.7.0backend/go.mod
Gogithub.com/getsentry/sentry-gov0.47.0backend/go.mod
Gogithub.com/go-chi/chi/v5v5.1.0backend/go.mod
Gogithub.com/go-chi/corsv1.2.1backend/go.mod
Gogithub.com/go-ldap/ldap/v3v3.4.8backend/go.mod
Gogithub.com/go-sql-driver/mysqlv1.8.1backend/go.mod
Gogithub.com/google/uuidv1.6.0backend/go.mod
Gogithub.com/jackc/pgx/v5v5.6.0backend/go.mod
Gogithub.com/jlaffaye/ftpv0.2.0backend/go.mod
Gogithub.com/ledongthuc/pdfv0.0.0-20250511090121-5959a4027728backend/go.mod
Gogithub.com/modelcontextprotocol/go-sdkv1.6.1backend/go.mod
Gogithub.com/pkg/sftpv1.13.6backend/go.mod
Gogithub.com/pquerna/otpv1.4.0backend/go.mod
Gogithub.com/pressly/goose/v3v3.21.1backend/go.mod
Gogithub.com/redis/go-redis/v9v9.19.0backend/go.mod
Gogithub.com/robfig/cron/v3v3.0.1backend/go.mod
Gogithub.com/skip2/go-qrcodev0.0.0-20200617195104-da1b6568686ebackend/go.mod
Gogithub.com/spf13/cobrav1.8.1backend/go.mod
Gogithub.com/stretchr/testifyv1.11.1backend/go.mod
Gogolang.org/x/cryptov0.50.0backend/go.mod
Gogolang.org/x/imagev0.39.0backend/go.mod
Gogolang.org/x/netv0.52.0backend/go.mod
Gogolang.org/x/oauth2v0.35.0backend/go.mod
Gogolang.org/x/termv0.45.0backend/go.mod
Gogopkg.in/yaml.v3v3.0.1backend/go.mod
Gomodernc.org/sqlitev1.30.2backend/go.mod
npm@brftech/filex-coreworkspace:*web/package.json
npm@headlessui/vue^1.7.23web/package.json
npmaxios^1.7.7web/package.json
npmlucide-vue-next^0.453.0web/package.json
npmpinia^2.2.4web/package.json
npmvue^3.5.12web/package.json
npmvue-i18n^9.14.0web/package.json
npmvue-router^4.4.5web/package.json
全部依赖 未采集

本报告未能采集到解析后的依赖集合：GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

原始 JSON 报告 机器可读
{
  "data": {
    "repo": {
      "topics": [
        "docker",
        "file-browser",
        "file-manager",
        "file-sharing",
        "golang",
        "mcp",
        "multi-tenant",
        "react",
        "s3",
        "self-hosted",
        "sftp",
        "vue",
        "web-components",
        "webdav"
      ],
      "is_fork": false,
      "size_kb": 7295,
      "has_wiki": false,
      "homepage": "https://filex.sh",
      "languages": {
        "Go": 2152570,
        "CSS": 92373,
        "Vue": 878811,
        "HTML": 2358,
        "Shell": 4423,
        "Python": 20885,
        "Mermaid": 755,
        "Dockerfile": 8388,
        "JavaScript": 7374,
        "TypeScript": 600678,
        "Go Template": 948,
        "Jupyter Notebook": 3873
      },
      "pushed_at": "2026-07-19T04:55:52Z",
      "created_at": "2026-07-03T20:42:30Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-22T20:00:25Z",
      "description": "filex - self-hosted file manager. Go backend + Vue 3 / React / Web Component frontend. Pluggable storage (local, S3, SFTP, WebDAV, FTP), auth (local, OIDC, LDAP, proxy-header) and DB drivers. Single binary or container. MIT.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go",
        "Vue",
        "TypeScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "BRF Tech",
      "type": "Organization",
      "login": "BRF-Tech",
      "company": null,
      "location": null,
      "followers": 1,
      "avatar_url": "https://avatars.githubusercontent.com/u/159972728?v=4",
      "created_at": "2024-02-14T01:21:38Z",
      "is_verified": null,
      "public_repos": 2,
      "account_age_days": 892
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.7.5",
          "kind": "patch",
          "published_at": "2026-07-19T05:03:52Z"
        },
        {
          "tag": "v0.7.4",
          "kind": "patch",
          "published_at": "2026-07-18T19:30:28Z"
        },
        {
          "tag": "v0.7.3",
          "kind": "patch",
          "published_at": "2026-07-18T15:16:52Z"
        },
        {
          "tag": "v0.7.2",
          "kind": "patch",
          "published_at": "2026-07-18T14:18:57Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2026-07-18T09:26:10Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-07-17T22:09:51Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-07-17T20:19:22Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-07-17T17:41:07Z"
        },
        {
          "tag": "v0.4.2",
          "kind": "patch",
          "published_at": "2026-07-17T16:06:06Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-07-17T13:51:23Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-07-17T12:20:25Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-07-17T11:15:40Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-07-17T08:06:24Z"
        },
        {
          "tag": "v0.1.84",
          "kind": "patch",
          "published_at": "2026-07-17T06:40:15Z"
        },
        {
          "tag": "v0.1.83",
          "kind": "patch",
          "published_at": "2026-07-16T21:56:06Z"
        },
        {
          "tag": "v0.1.82",
          "kind": "patch",
          "published_at": "2026-07-10T13:31:47Z"
        },
        {
          "tag": "v0.1.81",
          "kind": "patch",
          "published_at": "2026-07-09T11:03:12Z"
        },
        {
          "tag": "v0.1.80",
          "kind": "patch",
          "published_at": "2026-07-09T09:32:12Z"
        },
        {
          "tag": "v0.1.79",
          "kind": "patch",
          "published_at": "2026-07-09T07:08:12Z"
        },
        {
          "tag": "v0.1.78",
          "kind": "patch",
          "published_at": "2026-07-08T23:26:03Z"
        },
        {
          "tag": "v0.1.77",
          "kind": "patch",
          "published_at": "2026-07-08T22:20:36Z"
        },
        {
          "tag": "v0.1.76",
          "kind": "patch",
          "published_at": "2026-07-08T21:58:05Z"
        },
        {
          "tag": "v0.1.75",
          "kind": "patch",
          "published_at": "2026-07-08T17:30:31Z"
        },
        {
          "tag": "v0.1.74",
          "kind": "patch",
          "published_at": "2026-07-08T15:42:36Z"
        },
        {
          "tag": "v0.1.73",
          "kind": "patch",
          "published_at": "2026-07-07T15:08:30Z"
        },
        {
          "tag": "v0.1.72",
          "kind": "patch",
          "published_at": "2026-07-07T13:28:01Z"
        },
        {
          "tag": "v0.1.71",
          "kind": "patch",
          "published_at": "2026-07-07T00:22:13Z"
        },
        {
          "tag": "v0.1.70",
          "kind": "patch",
          "published_at": "2026-07-07T00:05:43Z"
        },
        {
          "tag": "v0.1.69",
          "kind": "patch",
          "published_at": "2026-07-06T23:38:11Z"
        },
        {
          "tag": "v0.1.68",
          "kind": "patch",
          "published_at": "2026-07-06T11:50:04Z"
        },
        {
          "tag": "v0.1.67",
          "kind": "patch",
          "published_at": "2026-07-05T23:52:21Z"
        },
        {
          "tag": "v0.1.66",
          "kind": "patch",
          "published_at": "2026-07-05T22:11:36Z"
        },
        {
          "tag": "v0.1.65",
          "kind": "patch",
          "published_at": "2026-07-05T21:36:41Z"
        },
        {
          "tag": "v0.1.64",
          "kind": "patch",
          "published_at": "2026-07-05T21:09:31Z"
        },
        {
          "tag": "v0.1.63",
          "kind": "patch",
          "published_at": "2026-07-05T21:09:21Z"
        },
        {
          "tag": "v0.1.62",
          "kind": "patch",
          "published_at": "2026-07-05T12:50:38Z"
        },
        {
          "tag": "v0.1.61",
          "kind": "patch",
          "published_at": "2026-07-05T09:30:47Z"
        },
        {
          "tag": "v0.1.60",
          "kind": "patch",
          "published_at": "2026-07-05T00:42:29Z"
        },
        {
          "tag": "v0.1.59",
          "kind": "patch",
          "published_at": "2026-07-05T00:21:39Z"
        },
        {
          "tag": "v0.1.58",
          "kind": "patch",
          "published_at": "2026-07-04T23:44:48Z"
        },
        {
          "tag": "v0.1.57",
          "kind": "patch",
          "published_at": "2026-07-04T11:44:17Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "62fde6c74fcf050fce26c0997ed6d3f9ae5ea150",
          "body": "…no behavior change\n\nmd5(cleaned path)+NUL+LE storage id was copy-pasted across nine call sites;\nnow a single internal/pathkey.Hash() (byte-identical output, existing\npath_hash values unaffected; hash-equivalence test pins it).",
          "is_bot": false,
          "headline": "chore(release): v0.7.5 — path-hash single source (internal/pathkey), …",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-19T04:54:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6c836f3f120ae7372abeacecea3d2f7183cdb28",
          "body": "Split view: virtual Trash row was injected only by the main panel, so the\nsecondary pane's rows were offset. Trash-row synthesis + internal-entry\nfilter are now a shared source (lib/listing.ts) used by both panes.\nStandalone Explore page: min-h-screen -> h-screen so tall listings scroll\ninside each pane instead of the whole page.",
          "is_bot": false,
          "headline": "fix(ui): v0.7.4 split view trash-row parity + standalone page-scroll",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-18T19:21:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7c900ed4ef3a9a572cd7f4c61a5f3fb02853eea",
          "body": "…rumb alignment\n\nSecondary pane right-click menu now renders the single selectionActionList\nsource; pane actions incl. rename/delete/new-folder route to the focused\npane. Dropping a file onto its own folder is a silent no-op instead of an\nS3 copy-to-itself 400. Secondary pane breadcrumb shares identical padding/\nfont/height with the main breadcrumb.",
          "is_bot": false,
          "headline": "fix(ui): v0.7.3 split view menu parity + same-dir drop no-op + breadc…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-18T15:09:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f59732571aecd3eeb9e85f618ad3e1f6397d0e1d",
          "body": "…menu\n\nSplit view: main panel breadcrumb (+ presence/lock strips) moved into a\n.fe__primary wrapper so it occupies only the left half instead of the\nfull width, mirroring the secondary pane. Right-click in the secondary\npane now opens a pane-routed menu (open/download/copy/cut/paste); empty\nspace shows a paste-only menu for pasting into an empty folder.",
          "is_bot": false,
          "headline": "fix(ui): v0.7.2 split view breadcrumb width + secondary pane context …",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-18T14:10:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e68ce34ec5660c445564a56d4cec408e0b401626",
          "body": null,
          "is_bot": false,
          "headline": "docs: fresh v0.7.1 screenshot set + runtipi logo",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-18T09:52:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "335efb6d0ad73d535bbfaea82a401bfdb4fb9606",
          "body": "Host overflow (content-box borders) + outer scrollbar/toast drift, tab\nstrip scrollbar hidden, split pane renders real list/grid/gallery views\nwith per-pane view mode + focused-pane view switcher + focused-pane\ncontext-menu paste, single-line toolbar with overflow folding, shortcut\nsuppression while a context menu is open, AA accent contrast.",
          "is_bot": false,
          "headline": "fix(ui): v0.7.1 polish round",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-18T09:17:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe4b0391bc6a4899b397cf8fdd1736a4eb581758",
          "body": "Settings-driven tenant-aware branding for public pages + login,\nend-to-end encrypted folders (client-side WebCrypto MVP, server-blind,\ndocs/E2E-ENCRYPTION.md), and a flag-gated cloud readiness skeleton\n(FILEX_CLOUD default off, docs/CLOUD.md).",
          "is_bot": false,
          "headline": "feat(kimlik): v0.7.0 identity & trust wave",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-17T22:00:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f9c3cfffcd1e279ad6bf696ef39a0ffa683d443",
          "body": "Tabs (persistent, remappable shortcuts), per-tab split view with\ncross-pane drag move/copy, gallery view mode, browsable public folder\nshares with auto gallery layout, per-file comments (migration 00020)\nwith comment.added webhook.",
          "is_bot": false,
          "headline": "feat(calisma): v0.6.0 workspace wave",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-17T20:10:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9548de8e37c1aef8ee577793b0b17308d7d9141",
          "body": "Theme gallery (8 themes, light+dark variants, token engine), customizable\nkeyboard shortcuts + Space quick look, unified operations center,\nonboarding tour, a11y pass (grid roles, keyboard context menu, focus\ntraps, reduced motion), drag-drop polish, palette settings commands.",
          "is_bot": false,
          "headline": "feat(gorunum): v0.5.0 appearance wave",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-17T17:32:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07499ab112b3f9b9a0a6fa88790f914c5834f844",
          "body": "Trash child-path retag + soft-delete-aware unique index (#5), WebDAV\nDELETE lands in trash, keep_n>20 honored, writehook post-write gate\n(AV + webhooks on ai/sharex/dav/ops), webhook last-delivery status,\nrecursive CLI upload, grid view search snippets.",
          "is_bot": false,
          "headline": "feat(temizlik): v0.4.2 cleanup wave",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-17T15:57:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89a0ddafe029310fbd4b1a60fca2c4df95496665",
          "body": "App-store packaging (Umbrel/CasaOS/Runtipi/Unraid/Portainer + Helm\nfix), VitePress docs site, capability probe health paths + short fail\nTTL, dead deep-link hash cleanup.",
          "is_bot": false,
          "headline": "feat(vitrin): v0.4.1 showcase wave",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-17T13:43:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "57542c1e38558c4bc1ee299f5a6d24da8ff874e4",
          "body": "Inspector panel with version history, optional ClamAV quarantine with\nfile.infected events, protection settings API + admin page, version\nretention cron, admin quota UI + endpoint fixes, share stats; wires\nthe never-started daily trash purge loop.",
          "is_bot": false,
          "headline": "feat(koru): v0.4.0 protection wave",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-17T12:11:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c59bf2897483d69f79b38529a1b3cb052bb2cc35",
          "body": "WebDAV server (Basic auth, RBAC, DB/index sync), filex client CLI,\nwebhook targets with HMAC signing + file events + admin UI, narrow\nembed mini mode.",
          "is_bot": false,
          "headline": "feat(baglan): v0.3.0 connectivity wave",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-17T11:06:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35b43c916ef04ee8514e53b2d2fe8c677a899039",
          "body": "Async content extraction (text/code/PDF/Office) into the Bleve index,\nscoped search with highlighted snippets, optional tesseract OCR,\nadmin duplicate report + view, palette global search with saved\nsearches, MCP file_search content flag.",
          "is_bot": false,
          "headline": "feat(bul): v0.2.0 content search wave",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-17T07:58:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a9393f3a2f05bc7f89552dd2f7ec63b46655afaf",
          "body": "Custom SVG file-type icons, date grouping + sortable columns, density\ntoggle, command palette (Ctrl+K), shortcuts help (?), breadcrumb\noverflow, skeleton loading, illustrated empty/error states, undo\nsnackbar, connection badge, public share/PIN/drop page redesign with\n'Shared with filex' footer, login polish.",
          "is_bot": false,
          "headline": "feat(cila): v0.1.84 design wave",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-17T06:32:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de9258dbc6cf4b7472b5e46d765dd0ab293275e2",
          "body": null,
          "is_bot": false,
          "headline": "docs: 0.1.83 changelog entry (embedded scroll fix)",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-16T21:50:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b47b73abec7a0cca5c2a238386457bd191ed4d0",
          "body": "- core: .fe__body gains min-height:0 — flexbox's default min-height:auto\n  kept the body at content height in height-constrained embeds, so its\n  overflow:auto never engaged and everything past the fold was clipped\n  (unreachable) by .fe's overflow:hidden.\n- core: default filex-explorer{display:bloc\n[…]\nd-height dummy host using the OLD broken\nembed pattern (inline display:block on the host): .fe stays flex, body\nconstrained and scrollable, 69-item listing fully reachable.\n\nPackages bumped to 0.1.83.",
          "is_bot": false,
          "headline": "fix(embed): height-constrained embeds could not scroll",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-16T21:48:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "63628b96251e3b403dd2e9989440ce7e44685508",
          "body": "…next publish)",
          "is_bot": false,
          "headline": "docs: logo mark atop main + package READMEs (npm pages pick it up on …",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-10T14:26:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73acd405d8d503d88763549fb65347d1eb578e99",
          "body": null,
          "is_bot": false,
          "headline": "docs: official logo mark (1024px, rendered from web LogoMark)",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-10T14:14:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5078872ff9c2cb8fa05e4e541813f613be1380c1",
          "body": "…tch, fresh demo landing card (#2 #3 #4)\n\n- viewer save chip / Edit / Close / Download / read-only / no-preview labels and\n  the presence toggle tooltip now go through the locale catalogue (new\n  viewer.* + presence.* keys, tr+en)\n- aiOps.cacheUpsertFile dispatches async thumbnail generation (manage\n[…]\nhareX (routes.go)\n- demo landing: 'Open source (soon)' -> 'Open source - MIT', canonical\n  github.com/BRF-Tech/filex link\n- CHANGELOG entries 0.1.69-0.1.82, SECURITY.md e-mail contact, packages 0.1.82",
          "is_bot": false,
          "headline": "fix: locale-clean viewer/presence strings, AI-surface thumbnail dispa…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-10T13:24:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bb47471c800a8f009eb135264ea1970633ffd484",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: tighter screenshots — cropped hero, modal-only share/viewer shots",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-10T10:27:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "80177c79ec92f55f468a53133f60ed80047da215",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: social preview image (1280x640 @2x)",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-10T09:53:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ff4299a74900cdb62b5869c14e3f60a14c8ced57",
          "body": "…ealtime/RBAC sections\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: README showcase rewrite — badges, live demo, screenshots, MCP/r…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-10T09:52:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "074c29c69bf70235bc6a016c687c8a56c9791a38",
          "body": "…nce attribution\n\nTokens carry a `usernames` allow-list (first = default, empty = label);\ncallers pick an identity per request via X-Filex-Token-User (unknown → 403).\nThe resolved username is stamped in audit metadata (AI writes are now audited\ntoo), shares.created_via and WS presence (\"Burak (work)\"), with new PATCH\nendpoints + admin UI for editing. Export of v0.1.81.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(tokens): per-token username identities — audit, shares and prese…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-09T10:55:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0fb97de9b9c2daaa6c66ac89439cfb5650bb1538",
          "body": "Thumbs now load through the same auth machinery as every API call (apiBase +\nheaders + credentials → object-URL cache), fixing empty images in embedded /\nproxied hosts. PresenceBar gains a persisted toggle between the compact\navatar strip and a scrollable row of full-name chips. Export of v0.1.80.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(core): authenticated grid thumbnails + expandable presence bar",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-09T09:17:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1db5dba7e22493c4eaadb1062ade40f1ba4e749c",
          "body": "- API-token tickets show the token LABEL; trusted host proxies stamp the real\n  end user via X-Filex-Presence-Name (RFC 2047 for non-ASCII) / -Key, giving\n  distinct identities to users behind one shared proxy token.\n- Rosters exclude the recipient (\"who else is here\") and carry a stable uid;\n  rena\n[…]\nsence with real names, self-exclusion, live change auto-refresh, focus +\nrename focus-follow, escape rejection. Export of v0.1.79.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(ws): real presence identity + confined-subscribe fixes (v0.1.79)",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-09T07:00:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "49f4de031f00dc4a49ba1782d6efeba94acf3640",
          "body": "…per-client frame paths\n\nPrepend the ticket's confine root to a confined client's WS subscribe path so the\nroom key, confine check and RBAC resolve the real folder, and echo each client's own\nsubscribed path in frames. Fixes live-collab in embedded (confined) explorers. Export\nof v0.1.78.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ws): resolve embedded confined subscribes to the absolute room + …",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-08T23:19:36Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "274c0f356070d9b1f259eec629bdd525aea62276",
          "body": "Load the ticket's user into the connection context so folder-subscribe RBAC\nresolves for ticket-authenticated (embedded) connections. Export of v0.1.77.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ws): authorize ticketed subscribes as the ticket's user (RBAC)",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-08T22:13:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b54fa5333b14851935a8fab78d6ff7604bd2954a",
          "body": "/api/ws moved to an OPTIONAL-auth group so a cookieless ticket-only upgrade from\nthe embedded webcomponent passes through to the handler's ?ticket validation\n(the required-auth group 401'd it before). Native cookie panel unchanged.\n\nExport of gitlab brftech/filemanager @ v0.1.76.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ws): allow ticket-only (embedded/cross-origin) WebSocket connections",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-08T21:50:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "797eed1e4f50eaa709e13d2d10645cd026184b0b",
          "body": "…ng fallback)\n\nLive collaboration now lives inside @brftech/filex-core's FileExplorer so every\nconsumer — native panel AND the embedded webcomponent — gets live folder updates\n+ presence, with no per-host wiring. WS ticket auth (POST /api/files/ws-ticket →\n{ticket, ws_url}; /api/ws accepts ?ticket) \n[…]\nen stays server-side.\nFalls back to API polling when no live socket is available.\n\nExport of gitlab brftech/filemanager @ v0.1.75.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(realtime): embed WS live-collab in the core (ticket auth + polli…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-08T17:22:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "987f26df07a20bf1ff35567405bee9fa86a8d26f",
          "body": "…r, live-collab WebSocket\n\n- share: on-disk folder-share ZIP cache (keyed by node id + content signature) +\n  5-min background warmer + a \"Dosya hazırlanıyor… %N\" progress page. Downloads hit\n  a warm cache (Content-Length) instead of re-walking + re-zipping every time.\n- sharex: POST /api/sharex/up\n[…]\nlder presence\n  (who is here / which file each is on). Explore.vue + PresenceBar.\n\nExport of gitlab brftech/filemanager @ v0.1.74.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: folder-share ZIP cache + warmer + progress page, ShareX uploade…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-08T15:32:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ec6c3a0b8e78f40ae0ff55c45c923057d4f953cf",
          "body": "… existing links\n\nThe permissions modal's \"Existing links\" section calls GET /api/files/share?path=\nto list (and revoke) an item's share links, but only POST (create) and DELETE\nexisted — so listShares always failed and the list stayed empty (\"no existing\nshare\") even right after creating a link. Ad\n[…]\nid} expects), url built from the token. Missing/unindexed paths return an\nempty list, not an error. Covered by share_list_test.go.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(share): add GET /api/files/share list endpoint so the modal lists…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-07T15:01:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "521679a9b25c72707f645b03026353b75c273f75",
          "body": "Adds an OS share-sheet button (navigator.share — Windows share / Android /\niOS) beneath the \"Send\" mail button in both the Link (download) and Request\nfiles (drop) tabs of the permissions modal. Pressing it shares the same text\nthe invite email carries: item name (+ size for files), link, PIN and va\n[…]\nemplates.go. The button is hidden when\nthe browser has no navigator.share (e.g. desktop Linux Chrome) so there is no\ndead control.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(share): native \"Paylaş\" (Web Share API) button under the mail row",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-07T13:19:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8e821ce79f0cf8794c937e7dfdd2a411f5b3b591",
          "body": "…ixes 404, denied dirs render as not-found\n\nBackend: blob stores (S3/GCS) list a nonexistent prefix as an empty\nsuccess, so the driver-fallback index rendered phantom folders as\nbrowsable empty dirs (200 + []). Zero objects now triggers a Stat\nconfirmation: a real empty dir (local/SFTP KindDirectory\n[…]\nh fake driver (phantom prefix 404, real children 200,\nempty bucket root 200) + cold-cache empty local dir stays 200 +\nnonexistent local dir 404.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(explorer): 'folder not found' for dead deep links — phantom pref…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-07T00:14:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ac1bcd403e16451fee6ec57141cfee479f6e4ebc",
          "body": "On a cold-load deep link vue-router already includes the #<folder> hash in\nfullPath, so appending window.location.hash again produced\n/login?redirect=/explore#x#x and the post-login landing loaded a garbage\npath. Append the hash only when the route doesn't carry one (session expiry\nafter in-app navigation, where the explorer wrote it via replaceState).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(web): don't double the explorer hash in the login redirect",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-06T23:58:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "741f1a211060746b8a07e6cd66499ee03ffddb5c",
          "body": "… deep links\n\nNew pathPersist mode 'hash+localStorage': the explorer writes the current\nfolder to the URL hash (#<storage>/<sub>) AND localStorage. Copying the\naddress bar now hands someone a link that opens the explorer directly at\nthat folder; hash-less visits still restore the remembered folder.\n\n[…]\nes ?redirect=<fullPath+hash> so logging in\n  lands the user back on the deep link (local login; OIDC bounce stays\n  fixed to /admin/ by design).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(explorer): address bar mirrors the current folder for copy-paste…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-06T23:29:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c804f5728fdbd5da91a83695893b7ff343490fe8",
          "body": "…ip Set-Cookie\n\nA TLS-terminating CDN strips a Domain-scoped Set-Cookie from a 3xx response\nwhile passing it on a 200 (host-only cookies survive either way), so the\ncallback's 302 lost the session cookie behind the CDN and the SPA looped on\n/api/auth/me 401. The successful callback now writes the se\n[…]\nesh + location.replace + noscript link) to a fixed relative /admin/.\nError/maintenance branches stay 302. No config/DB change; single- and\nmulti-tenant. State cookie is host-only and already survives.",
          "is_bot": false,
          "headline": "fix(auth): OIDC callback lands via 200 HTML bounce so a CDN can't str…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-06T11:42:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "56db733858556d30a51576c6705b94cc227585e5",
          "body": "…ti-tenant\n\nRegression guard: multi-tenant + provider explicit cookie_domain + base64url\nOIDC token → callback emits filex_session=<token>; Domain=...; Secure, at both\nhandler-direct and full-router+middleware levels. Adds testutil.NewTestServerWith\nto inject an OIDC driver. No behavior change.",
          "is_bot": false,
          "headline": "test(auth): prove OIDC callback emits Domain-scoped Set-Cookie in mul…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-06T07:14:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01cc16c60099ec3dc62326157b2e102b9691abb1",
          "body": "…rded-Proto aware)\n\nThe session cookie never set Secure; the OIDC state cookie set it only on\nr.TLS != nil, never true behind a TLS-terminating proxy (filex sees plain\nHTTP + X-Forwarded-Proto: https). Both now derive Secure from r.TLS OR\nX-Forwarded-Proto=https. On a Domain-scoped cookie this is what Chrome's\nschemeful-same-site needs to keep the cookie through the OIDC redirect\nchain. Plain-HTTP installs still get a non-Secure cookie.",
          "is_bot": false,
          "headline": "fix(auth): mark session + OIDC state cookies Secure on HTTPS (X-Forwa…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-05T23:46:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60abcb031070cbda2cc35ba0bb4233a787af87ac",
          "body": "…der cookie domain\n\nCallback success/error/maintenance redirects derived their base from\nFILEX_PUBLIC_URL — in multi-tenant mode that is the operator host, so\nusers landed on the wrong tenant with no session. The base now comes\nfrom the request host when it resolves to an enabled provider row\n(trust\n[…]\nider.cookie_domain\n(new nullable column, migration 00015) > derived from provider host\n(files.example.com -> .example.com) > global FILEX_COOKIE_DOMAIN.\nSet + clear symmetric. Single-tenant unchanged.",
          "is_bot": false,
          "headline": "fix(multi-tenant): OIDC callback redirects to tenant host + per-provi…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-05T22:04:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c06abd7dc3b6dbf09f88676fecc05d845cd362b6",
          "body": "Dockerfiles pin build stages to $BUILDPLATFORM and cross-compile the Go\nbinary via TARGETOS/TARGETARCH (CGO=0) — only the runtime stage's apk\ninstalls run per-arch; release workflow now builds both platforms via\nQEMU + buildx. Fix Dockerfile.full's silent no-op -X main.version ldflags\n(full images always reported 0.1.0-dev).",
          "is_bot": false,
          "headline": "feat(docker): multi-arch images (linux/amd64 + linux/arm64)",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-05T21:29:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f145a0c786447e6a238ea6dc7710ad6abbe5574",
          "body": "staticcheck U1000 on a never-referenced admin MCP input type, plus two\nfiles gofmt had drifted on. No runtime changes.",
          "is_bot": false,
          "headline": "fix(lint): drop unused adminIDFiltersIn + gofmt config/storage",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-05T20:59:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "12eda646f70dff3c0bafe83e75a059c490cc968f",
          "body": "…_DOMAIN\n\nTwo new opt-in knobs for SSO-only installs (both default OFF = behavior\nunchanged):\n\n- FILEX_OIDC_AUTO_REDIRECT: login page starts the OIDC flow immediately;\n  password form stays reachable via /admin/login?local=1 (break-glass).\n  Loop guards: ?local=1, ?error=oidc, ?maintenance=1, demo m\n[…]\nnd clear.\n\nFix: axios 401 interceptor no longer pushes /login during the initial\nnavigation — that push raced the pending navigation and stripped login\nquery params (?redirect, ?local=1, ?error=oidc).",
          "is_bot": false,
          "headline": "feat(auth): SSO-first login (FILEX_OIDC_AUTO_REDIRECT) + FILEX_COOKIE…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-05T20:58:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e46386810b044b3cb620e09fe90fb0d13b24761f",
          "body": "- formatSize: a real zero (empty file/folder) renders \"0 B\" — zero is\n  information, not absence; only null/negative stays \"—\".\n- index serialization: rows without a backend mtime (empty folders on\n  synthetic-dir stores have no descendants to aggregate one from) fall back to\n  the node's created_at\n[…]\nm the trash listing, best-effort and non-blocking, and gets a\n  proper trash icon in both list and grid views instead of a folder.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(explorer): empty file/folder size+date + real Trash size/date/icon",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-05T12:43:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "38e0c11869aea10464d7697f7528ed4b3b194adc",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: CHANGELOG 0.1.61 (native multi-tenancy)",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-05T09:23:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7da0c2dd363593267e1c68f15e3163855a972da9",
          "body": "…o-layer isolation\n\nOne filex install serving N tenants: a provider row = an auth realm (OIDC or\nlocal) bound to a host, linked to its storages. Realm X users see only storage\nX (even admins); users of other realms are invisible — including on the\npermission/grant picker. OFF by default: a single-te\n[…]\ns (tenant A\nnever sees tenant B), lifecycle guards, suspend + maintenance lockout — green;\nfull suite unchanged with the flag off.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: native multi-tenancy (FILEX_MULTI_TENANT) — provider=tenant, tw…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-05T09:23:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a8fb273b1bce66f52d4e36f2e19d8e53cc1ac440",
          "body": "…lease job\n\nSync now backfills a missing backend_mtime for nodes first indexed by an older\nversion, so 0.1.59 folder \"last activity\" dates appear after an upgrade without\nwaiting for content to drift (one cheap write per node, only while null).\n\nThe npm publish is now a separate `npm` job, independe\n[…]\nalready-existing release tag). NPM_TOKEN must be an npm\nAutomation/granular token (bypasses 2FA); a Publish token fails with EOTP.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(sync): backfill missing backend_mtime + split npm into its own re…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-05T00:35:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d4dbc7943b3dac6deb9bdee82baf99fd2abc91db",
          "body": "Folders now show a date in the explorer alongside the recursive size added in\n0.1.58. The date is each folder's newest descendant mtime (\"last activity\"),\ncomputed in the same end-of-sync aggregation pass (one post-order walk, no extra\nqueries) and cached in nodes.backend_mtime — served from the ind\n[…]\n sidebar icon now reflects its contents: a full bin when the trash\nholds items, the empty bin otherwise (refreshed on navigation).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: folder \"last activity\" date + full/empty trash icon",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-05T00:13:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "22df441771c3d566e64d350fc1a11ec0409c3ede",
          "body": "…tep if)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(release): fix npm step — guard in-script (secrets not allowed in s…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-04T23:37:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "48f811aa7c6693883a64d93ee1d4faa9ab51afb1",
          "body": "…_LOCALE\n\nFolder rows now show their recursive size (cached on the node index, recomputed\neach sync, served without re-scanning the backend) and modified date. Operators\ncan pin the default UI language via FILEX_DEFAULT_LOCALE (overrides browser\ndetection; user switch still wins).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: folder size+date in explorer (cached, N+1-free) + FILEX_DEFAULT…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-04T23:31:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9bf003ad6e8c7eae86bce303621dbb4679531971",
          "body": "…er-filex)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(converter): clean user guide + fix converter image name (convert…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-04T21:49:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1d6682da0b01d617bcf10efcef04b89f75b27b67",
          "body": "…ret)\n\nPublishes @brftech/filex-{core,,react} to npmjs, versions pinned to the tag.\nRuns only when an NPM_TOKEN (npm Automation token) repo secret is set.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(release): auto-publish npm packages on tag (gated on NPM_TOKEN sec…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-04T17:14:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a7c2a83737b452bdc850e0cd0f673296beb6fa61",
          "body": "On a v* tag: build the frontend, embed it, and (1) run goreleaser to build\nlinux/macOS/windows x amd64/arm64 binaries + archives and attach them to a\nGitHub Release, and (2) build + push the Docker images to\nghcr.io/brf-tech/filex (:latest + :<tag>, plus :full). ci.yml stays build/test\nonly. goreleaser config validated locally (6 platform archives).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add release workflow — tag -> binaries (goreleaser) + ghcr images",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-04T11:25:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c5ce26b4d644435ad31ea39b06d3ac7ae671a65d",
          "body": "…/s3) + fix JSON port\n\nGeneric FILEX_DEFAULT_STORAGE_CONFIG raw-JSON seed for any driver, surfaced in\nHelm (storage.config) + Compose (.env) with external S3 / SFTP / WebDAV examples.\nFix sftp/ftp custom-port parsing (JSON numbers are float64). STORAGE.md gains a\nclear plain-env / Compose / Helm 'connect a storage at install time' section.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(storage): connect any external storage from env (sftp/webdav/ftp…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-04T10:59:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a60d65b693fa489a29f6855cae6788a71d1b111a",
          "body": "… mermaid\n\nBackend: seed all boot/UI settings from env on first boot (admin, SMTP, branding,\ntrash, an initial local/s3 storage), LDAP/proxy-header env bindings, OIDC redirect\nauto-default + read roles from the access token / dotted claim path so admin-group\nelevation works with a stock Keycloak. Re\n[…]\nO login -> admin elevation), and a Helm install on a kind\ncluster (pod Ready, seeded storage). Go unit tests + helm lint/template.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: zero-touch env config, selectable storage, converter fork, drop…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-04T10:34:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6abc77ddb602309fb2bc92c72c4b45f0dcd87ede",
          "body": "… as toggles\n\nREADME: point Quick start at deploy/compose (minimal + full) and deploy/helm,\nlist them under Subdirectories, fix the releases URL + clone dir.\n\nFull Compose: all external integrations as opt-in profiles (onlyoffice, drawio,\nconvert, minio) toggled via COMPOSE_PROFILES + FILEX_*_URL; C\n[…]\nconvert as enabled+url integration toggles wired into filex env. So an add-on\nlike OnlyOffice can be dropped by flipping one flag.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "deploy: reference deploy/ from README + add all external integrations…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-04T09:08:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "11cf094feb3a585908012b1cea70b74f6fe86560",
          "body": "… to GitHub private reporting\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: set license holder to BRF Tech + point security/conduct reports…",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-03T23:51:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e480a491190965c5e68024d7a3cba361312200bc",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: add GitHub Actions build/test workflow",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-03T22:12:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f39f40ac4548ca40a9defee08979af475a55cad9",
          "body": "filex is a self-hosted file manager: a single Go binary (or Docker\ncontainer) with a Vue 3 / React / Web Component frontend and pluggable\nstorage, auth, database and queue drivers.\n\n- Storage: local, S3, SFTP, WebDAV, FTP\n- Auth: local (TOTP), OIDC / SSO, LDAP / AD, reverse-proxy header, API tokens\n\n[…]\n for agents\n\nShips with full documentation (docs/), Docker Compose stacks\n(deploy/compose/) and a Helm chart (deploy/helm/filex/).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Initial public release",
          "author_name": "Burak Karatay",
          "author_login": "brkfun",
          "committed_at": "2026-07-03T22:00:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 41,
      "commits_last_year": 59,
      "latest_release_at": "2026-07-19T05:03:52Z",
      "latest_release_tag": "v0.7.5",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 0.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/BRF-Tech/filex",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/BRF-Tech/filex",
          "is_deprecated": false,
          "latest_version": "v0.7.5",
          "repository_url": "https://github.com/BRF-Tech/filex",
          "versions_count": 41,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-19T04:54:20Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 2,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "notebooks"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "e2e/tsconfig.json",
        "packages/core/tsconfig.json",
        "packages/react/tsconfig.json",
        "packages/webcomponent/tsconfig.json",
        "web/tsconfig.json"
      ],
      "toolchain_manifests": [
        "backend/go.mod"
      ],
      "largest_source_bytes": 117418,
      "source_files_sampled": 453,
      "oversized_source_files": 2,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "backend/go.mod",
        "docs-site/package.json",
        "e2e/package.json",
        "package.json",
        "web/package.json"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go",
        "npm"
      ],
      "dependencies": [
        {
          "name": "github.com/aws/aws-sdk-go-v2",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.30.3"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/config",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.27.27"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/credentials",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.17.27"
        },
        {
          "name": "github.com/aws/aws-sdk-go-v2/service/s3",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.58.2"
        },
        {
          "name": "github.com/blevesearch/bleve/v2",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.4.2"
        },
        {
          "name": "github.com/blevesearch/bleve_index_api",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.10"
        },
        {
          "name": "github.com/coder/websocket",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.15"
        },
        {
          "name": "github.com/coreos/go-oidc/v3",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.11.0"
        },
        {
          "name": "github.com/fatih/color",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.17.0"
        },
        {
          "name": "github.com/fsnotify/fsnotify",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.7.0"
        },
        {
          "name": "github.com/getsentry/sentry-go",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.47.0"
        },
        {
          "name": "github.com/go-chi/chi/v5",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.1.0"
        },
        {
          "name": "github.com/go-chi/cors",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.1"
        },
        {
          "name": "github.com/go-ldap/ldap/v3",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.4.8"
        },
        {
          "name": "github.com/go-sql-driver/mysql",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.1"
        },
        {
          "name": "github.com/google/uuid",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.0"
        },
        {
          "name": "github.com/jackc/pgx/v5",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v5.6.0"
        },
        {
          "name": "github.com/jlaffaye/ftp",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.2.0"
        },
        {
          "name": "github.com/ledongthuc/pdf",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20250511090121-5959a4027728"
        },
        {
          "name": "github.com/modelcontextprotocol/go-sdk",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.6.1"
        },
        {
          "name": "github.com/pkg/sftp",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.13.6"
        },
        {
          "name": "github.com/pquerna/otp",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.4.0"
        },
        {
          "name": "github.com/pressly/goose/v3",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.21.1"
        },
        {
          "name": "github.com/redis/go-redis/v9",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v9.19.0"
        },
        {
          "name": "github.com/robfig/cron/v3",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "github.com/skip2/go-qrcode",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20200617195104-da1b6568686e"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.1"
        },
        {
          "name": "github.com/stretchr/testify",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.11.1"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.50.0"
        },
        {
          "name": "golang.org/x/image",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.39.0"
        },
        {
          "name": "golang.org/x/net",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.52.0"
        },
        {
          "name": "golang.org/x/oauth2",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.35.0"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        },
        {
          "name": "modernc.org/sqlite",
          "manifest": "backend/go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.30.2"
        },
        {
          "name": "@brftech/filex-core",
          "manifest": "web/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@headlessui/vue",
          "manifest": "web/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.7.23"
        },
        {
          "name": "axios",
          "manifest": "web/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.7.7"
        },
        {
          "name": "lucide-vue-next",
          "manifest": "web/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.453.0"
        },
        {
          "name": "pinia",
          "manifest": "web/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.2.4"
        },
        {
          "name": "vue",
          "manifest": "web/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.5.12"
        },
        {
          "name": "vue-i18n",
          "manifest": "web/package.json",
          "ecosystem": "npm",
          "version_constraint": "^9.14.0"
        },
        {
          "name": "vue-router",
          "manifest": "web/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.4.5"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 1,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 4,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "brkfun",
          "commits": 59,
          "avatar_url": "https://avatars.githubusercontent.com/u/19393636?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "eslint.config.js"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "101 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "62fde6c74fcf050fce26c0997ed6d3f9ae5ea150",
        "ran_at": "2026-07-25T02:39:11Z",
        "aggregate_score": 2.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-19T05:15:05Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-05T09:23:10Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/BRF-Tech/filex",
    "host": "github.com",
    "name": "filex",
    "owner": "BRF-Tech"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 29,
        "vitality": 69,
        "community": 43,
        "governance": 54,
        "engineering": 89
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 69,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "commits_last_year": 59,
              "human_commit_share": 1,
              "days_since_last_push": 5,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "59 commits in the last year",
                "points": 16,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 59
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 41,
              "latest_release_tag": "v0.7.5",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 0.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "41 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 41
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 43,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 2,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "2 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "merged_prs": 1,
              "open_issues": 0,
              "closed_issues": 4,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1/1 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 41,
            "inputs": {
              "followers": 1,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "BRF-Tech",
              "public_repos": 2,
              "account_age_days": 892
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1 followers of BRF-Tech",
                "points": 2.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1,
                      "login": "BRF-Tech"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "2 public repos, account ~2 yr old",
                "points": 8.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 2
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 2
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/BRF-Tech/filex"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "41 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 41
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 89,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.js",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.js"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [
                "docker",
                "file-browser",
                "file-manager",
                "file-sharing",
                "golang",
                "mcp",
                "multi-tenant",
                "react",
                "s3",
                "self-hosted",
                "sftp",
                "vue",
                "web-components",
                "webdav"
              ],
              "has_wiki": false,
              "homepage": "https://filex.sh",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://filex.sh",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "14 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 14
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "critical",
        "name": "Security",
        "value": 29,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 29,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 2.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "101 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 1
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 67,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "59 of 59 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 59,
                      "sampled": 59
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "e2e/tsconfig.json",
                "packages/core/tsconfig.json",
                "packages/react/tsconfig.json",
                "packages/webcomponent/tsconfig.json",
                "web/tsconfig.json"
              ],
              "agent_commit_share": 0.542,
              "toolchain_manifests": [
                "backend/go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "backend/go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "backend/go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.js",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.js"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "e2e/tsconfig.json, packages/core/tsconfig.json, packages/react/tsconfig.json, packages/webcomponent/tsconfig.json, web/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "e2e/tsconfig.json, packages/core/tsconfig.json, packages/react/tsconfig.json, packages/webcomponent/tsconfig.json, web/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "32 of the last 59 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 32,
                      "sampled": 59
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 117418,
              "source_files_sampled": 453,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/453 source files over 60KB",
                "points": 54.8,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 453,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "moderate",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "example_dirs": [
                "notebooks"
              ],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "notebooks",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "notebooks"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T02:39:22.169743Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/BRF-Tech/filex.svg",
  "full_name": "BRF-Tech/filex",
  "license_state": "standard",
  "license_spdx": "MIT"
}

相关记录

与 BRF-Tech/filex 共享目录标签或生态系统的已检测仓库。 并排阅读 →

86appwrite/appwriteAppwrite® - complete cloud infrastructure for your web, mobile and AI apps. Including Auth, Databases, Storage, Functions, Messaging, Hosting, Realtime and more优秀91authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™优秀90mattermost/mattermostMattermost is an open source platform for secure collaboration across the entire software development lifecycle..优秀88SigNoz/signozSigNoz is an open-source, OpenTelemetry-native observability platform for your team and their AI agents. Get logs, metrics, and traces in one tool with features like APM, distributed tracing, log management, infra monitoring, etc. Combined with SigNoz MCP and a native AI teammate (in SigNoz Cloud) it helps you build more resilient apps.优秀87traefik/traefikThe Cloud Native Application Proxy优秀90ionic-team/ionic-frameworkA powerful cross-platform UI toolkit for building native-quality iOS, Android, and Progressive Web Apps with HTML, CSS, and JavaScript.优秀

评分是信号，而非担保。 评分反映的是 GitHub 上公开可见的实践——不是代码审计，也不是安全保证。

缺失数据将被剔除并重新归一化权重，绝不按零分计。方法论已版本化并公开：指标 v1.13.0、模式 v0.27.0—— 完整方法论 · 指标知识库.

单项结果在整体记录中的位置： 汇总统计 — Go.